Practice Exam

1.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

You have been using Network Monitor to capture and analyze DHCP-related traffic. You notice a large amount of traffic from IP address lease requests, and the frequency of the requests is high.

You verify that there are more IP addresses in the scope than DHCP clients on the network.

You want to reduce network traffic.

What should you do?

	A.	Configure half of the clients with static IP addresses.
	B.	Increase the lease duration for the scope.
	C.	Configure another DHCP server on the network.
	D.	Add a DHCP Relay Agent to the network.

2.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. The network is divided into three different subnets.

You need to implement an IP addressing solution. You add a DHCP server to each of the subnets. Each DHCP server is configured with a scope for the local subnet.

Users on Subnet1 soon report that they cannot access any resources outside of their local subnet. You discover that all clients are leasing IP addresses but no clients can access resources on other subnets.

You need to resolve the problem.

What should you do?

	A.	Activate the scopes on all servers.
	B.	Configure the properties of TCP/IP on each workstation, and configure the IP address of the gateway.
	C.	Authorize the DHCP servers within Active Directory.
	D.	Configure the 003 router option on each DHCP server.

3.

You are the network administrator for your organization. All servers are running Microsoft Windows Server 2003.

You have assigned a junior administrator the task of installing a DHCP server in a test environment. He successfully installs the DHCP service on a member server and adds a scope. However, he soon discovers that the service is constantly being shut down.

What is causing the problem?

	A.	The junior administrator did not activate the scope.
	B.	The junior administrator must install the DHCP service on a domain controller.
	C.	The junior administrator did not authorize the DHCP server.
	D.	The junior administrator configured the server with incorrect scope information.

4.

You are the network administrator of a Windows Server 2003 network. You are in charge of implementing an IP addressing solution.

You install the DHCP service on an existing server. Three servers on the network are running applications that require the servers to have static IP addresses.

You need to ensure that these servers are always using the same IP addresses.

What should you do?

	A.	Manually assign the servers IP addresses. Exclude the IP addresses that will be used for the servers from the scope.
	B.	Create three client reservations. Exclude the IP addresses from the scope. Configure the servers as DHCP clients.
	C.	Configure a client reservation for each of the servers. Configure the three servers as DHCP clients.
	D.	Configure a superscope and add to it the IP addresses that will be assigned to the servers. Configure the three servers as DHCP clients.

5.

DHCP is deployed on the network, and all clients are configured to automatically obtain an IP address. If the DHCP server is unavailable, clients will use an IP address from which of the following address ranges?

	A.	192.168.0.1 to 192.168.255.254.
	B.	192.168.0.1 to 192.168.0.254
	C.	127.0.0.1 to 127.255.255.154
	D.	169.254.0.0 to 169.254.255.255

6.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

You are responsible for implementing DHCP on the network. The network consists of multiple subnets. A single DHCP server is installed on Subnet A. DHCP Relay Agents are enabled on the remaining subnets. The configuration is tested, and all clients are successfully leasing IP addresses.

You soon discover that only users on subnet B can communicate outside of their local subnet.

What is causing the problem?

	A.	The DHCP server is configured with a single scope.
	B.	The DHCP Relay Agents are not configured with the correct IP address for the DHCP server.
	C.	The scopes on the DHCP server have not been activated.
	D.	The 003 router option has been configured at the server level.

7.

You are one of the network administrators for your company. All servers are running Microsoft Windows Server 2003. They are all members of the same Active Directory domain.

You need to deploy DHCP on the network. You install and configure the service on an existing server. You configure and activate a scope.

When you attempt to authorize the DHCP server, you receive an access denied error message.

What is causing the problem?

	A.	You must be a member of the DNSUpdateProxy group to authorize a DHCP server.
	B.	You must be a member of the Enterprise Admins group to authorize a DHCP server.
	C.	You must be a member of the Domain Admins group to authorize a DHCP server.
	D.	You must be a member of the Administrators group to authorize a DHCP server.

8.

You are a network administrator for your company. All servers are running Microsoft Windows Server 2003.

You are in the process of deploying dynamic IP addressing on the network. You need to configure a DHCP server to lease IP addresses to client computers on multiple subnets.

All clients must be assigned to the IP address of their local default gateway. The 003 router option must be configured at the correct level.

From the following list, place the scope options in the order that they are applied.

	Class
	Scope
	Server
	Client

9.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

Three servers on the network are configured with the following static IP addresses: 192.168.0.10, 192.168.0.11, and 192.168.0.12.

You install a DHCP server on the network and configure a scope with a range of IP addresses from 192.168.0.1 to 192.168.0.254.

You want to make sure that the IP addresses assigned to the server are not leased to any DHCP clients.

What should you do?

	A.	Configure client reservations for the three servers.
	B.	Exclude the three IP addresses from the scope.
	C.	Enable conflict detection on the DHCP server.
	D.	Create a superscope for the three static IP addresses.

10.

You are the network administrator for your company. All servers on the network are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

The network consists of two subnets connected by a BOOTP-enabled router. You have placed a DHCP server on each subnet.

You want to ensure that users can access all network resources should the DHCP server on their local subnets be unavailable. You want to accomplish this with the least amount of administrative effort.

What should you do?

	A.	Enable automatic IP addressing on the client computers.
	B.	Configure each DHCP server with a scope for each subnet.
	C.	Enable a DHCP relay agent on each subnet.
	D.	Configure the alternate configuration option on the client computers.

11.

You are the network administrator for a medium-size company. The company is in the process of upgrading the existing network infrastructure. Servers are now running Microsoft Windows Server 2003. Client computers are still running Microsoft Windows 95 and configured with static IP addresses.

You have been instructed to implement dynamic IP addressing. You install Dynamic Host Configuration Protocol on a Windows Server 2003 server. The server is authorized and a scope is created and activated. Most of the client computers are configured for dynamic IP addressing.

You soon receive reports from a few users that there are IP address conflicts on the network. You do not know the specific IP addresses within the scope range that are still used for static IP addressing. You need to resolve the problem as quickly as possible.

What should you do?

	A.	Increase the number of conflict detection attempts.
	B.	Exclude the IP addresses from the DHCP scope.
	C.	Create client reservations for the client computers with static IP addresses.
	D.	Change the start and end IP addresses for the scope.

12.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

You have just installed the DHCP service on an existing server. The scope has been configured, and the server now needs to be authorized.

Which administrative console should you open to perform this task?

	A.	DHCP console
	B.	Active Directory Sites and Services
	C.	Active Directory Users and Computers
	D.	Active Directory Domains and Trusts

13.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

There is a DHCP server and a DNS server on the network. Workstations are running a variety of different platforms. You want to identify which client computers on the network will be able to update their own host records with the DNS server.

Select the operating systems from the list on the right that can update their host records with the DNS server. Place these operating systems in the list on the left.

	Windows 95
	Windows Me
	Windows 2000
	Windows XP
	Windows 98

14.

You are the network administrator for your company. All servers have been upgraded to Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

A user reports that she is unable to connect to any other computers on the network. You want to verify that the workstation is receiving an IP address from a DHCP server.

What should you do?

	A.	Execute the nslookup command on the client computer.
	B.	Ping the IP address of the DHCP server.
	C.	Execute the IPCONFIG /ALL command on the client computer.
	D.	Use the properties of TCP/IP to verify the client computer is configured to obtain an IP address automatically.

15.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

One of the client computers on the network still uses NetBIOS. You are configuring an LMHOSTS file that will be used by the client to resolve NetBIOS names to IP addresses.

You want certain entries in the LMHOSTS file placed in the NetBIOS name cache each time the computer is restarted.

What should you do?

	A.	Add the #pre directive to the entries.
	B.	Add the #include directive to the entries.
	C.	Add the #mh directive to the entries.
	D.	Add the #DOM: domain_name directive to the entries.

16.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

You are planning the implementation of DHCP for a network that consists of a single subnet. Your manager is concerned that clients will not be able to access the company database server if the DHCP server is unavailable. All clients and servers are configured as DHCP clients. The workstations are running a number of different platforms. You inform your manager that the computers will use private IP addressing if a DHCP server is unavailable.

Which of the following platforms will support automatic private IP addressing? (Choose all correct answers.)

	A.	Windows 95
	B.	Windows 98
	C.	Windows Me
	D.	Windows XP
	E.	Windows NT 4.0

17.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

Client computers are configured to use dynamic IP addressing. The DHCP server is configured to perform DNS updates on behalf of DHCP clients. The zone is configured for secure updates only.

You must ensure that the DHCP server can still perform updates to the zone file.

What should you do?

	A.	Authorize the DHCP server.
	B.	Add the DHCP server to the DnsUpdateProxy group.
	C.	Configure the dynamic update credentials.
	D.	Configure static IP addresses for all clients.

18.

You are the network administrator for your company. All servers have been upgraded to Microsoft Windows Server 2003.

The network hosts a DHCP server and a DNS server. The zone is configured for dynamic updates. The DHCP server is configured with the default settings.

Client computers are running Windows 95, Windows 2000 Professional, and Windows XP Professional.

Which of the following statements are true regarding dynamic updates? (Select two.)

	A.	All clients will update their own PTR records and A records.
	B.	The DHCP server will update PTR records for Windows 2000 and Windows XP clients.
	C.	The DHCP server will update A records and PTR records on behalf of all clients.
	D.	Windows 2000 and Windows XP clients will update their own A records.
	E.	The DHCP server will update A and PTR records on behalf of Windows 95 clients.

19.

You are the network administrator of a Microsoft Windows Server 2003 network. All computers are members of a single Active Directory domain.

The DNS service is installed on two member servers. You upgrade both of these servers to domain controllers.

SRV01 is configured as the primary DNS server. SRV02 is configured as a secondary DNS server. You want to use the Active Directory replication topology for updating the zone file on SRV02.

What should you do?

	A.	From the properties window for the DNS server, select the General tab and click the Change button beside the Zone Type option. Select the option to store the zone in Active Directory.
	B.	From the properties window for the zone, select the Security tab and click the Change button. Select the option to store the zone in Active Directory.
	C.	From the properties window for the DNS server, select the Security tab and click the Change button. Select the option to store the zone in Active Directory.
	D.	From the properties window for the zone, select the General tab and click the Change button beside the Zone Type option. Select the option to store the zone in Active Directory.

20.

You are the network administrator for your company. All domain controllers are running Microsoft Windows Server 2003. The company maintains a UNIX DNS server.

A mail server has just been added to the network. You soon discover that mail is not getting delivered properly. You suspect that the mail is not getting routed to the proper server because its name might be unknown to the UNIX DNS server.

You need to ensure that mail is properly delivered to the proper server.

What should you do?

	A.	Verify that the appropriate MX record exists.
	B.	Verify that the UNIX server is configured for dynamic updates.
	C.	Verify that clients have been configured with the IP of the mail server through the properties of TCP/IP.
	D.	Verify that a CNAME record exists for the mail server.

21.

You are the network administrator for an insurance company. All servers are running Microsoft Windows Server 2003. The company uses a single Active Directory domain.

You have installed and configured the DNS service on an existing member server. The server hosts the zone file for the domain.

You are concerned about fault tolerance. You want users to be able to resolve host names if the existing DNS server is unavailable.

You want to install the DNS service on a second member server.

What should you do?

	A.	Configure the server as caching-only.
	B.	Configure the server as a second primary DNS server for the zone.
	C.	Configure the server as a secondary DNS server for the zone.
	D.	Configure the server to host an Active Directoryintegrated copy of the zone.

22.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. The company has a head office and several branch offices. The branch offices connect back to the head office via slow links.

The company has two DNS servers placed in the head office. Users in the branch offices report that name-resolution response time is slow. The budget allows you to place a DNS server within each location. However, you do not want any zone transfer traffic on the slow links.

What should you do?

	A.	Configure each of the new DNS servers as primary DNS servers for the zone.
	B.	Configure each of the new DNS servers as secondary DNS servers for the zone.
	C.	Configure each of the new DNS server as a caching-only server.
	D.	Configure each of the new DNS servers as a master name server for the zone.

23.

You are the network administrator for your company. All servers have been upgraded to Microsoft Windows Server 2003.

You are using the nslookup command to determine the hostname associated with the IP address of 192.168.0.35. You can successfully resolve other IP addresses to host-names using the command. However, you are unable to resolve the IP address of 192.168.0.35 to a hostname.

What is causing the problem?

	A.	There is no A record for Computer1.
	B.	The DNS server is not online.
	C.	There is no MX record for Computer1.
	D.	The PTR record has not been created for Computer1.

24.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional with the default configuration.

The network is shown in the diagram. DHCP-01 is configured with 20% of the IP addresses for Subnet 2 and Subnet 3. You have enabled a Dynamic Host Configuration Protocol (DHCP) Relay Agent on Subnet 2 and Subnet 3.

You want to verify that client computers can obtain IP addresses if DHCP-02 and DHCP-03 are offline. You stop the DHCP service on these DHCP servers. However, client computers on Subnet 2 are unable to lease IP addresses. You verify that this problem is not affecting Subnet 3.

You need to resolve the problem.

What should you do first?

	A.	Verify that the correct interface is added under the DHCP Relay Agent on Subnet 2.
	B.	Verify that the Relay DHCP packets option is selected for the DHCP Relay Agent interface on Subnet 2.
	C.	Verify that the DHCP Relay Agent on Subnet 2 is configured with the correct IP address for DHCP-01.
	D.	Verify that the scope options on DHCP-01 are correctly configured.

25.

You are the network administrator for your company. The company uses a single Active Directory domain. All servers are running Microsoft Windows Server 2003.

The company's domain controller hosts the Active Directoryintegrated zone for the domain. You want to increase security by specifying which users and groups can update the zone file.

What should you do?

	A.	From the properties window for the DNS server, select the General tab and change the Dynamic Updates option to Secure Only.
	B.	From the properties window for the zone, select the General tab and change the Dynamic Updates option to Secure Only.
	C.	From the properties window for the DNS server, select the Security tab and change the Dynamic Updates option to Secure Only.
	D.	From the properties window for the zone, select the Security tab and change the Dynamic Updates option to Secure Only.

26.

You are the network administrator for your company. The company uses a single Active Directory Domain. There is a head office and several branch offices. Branch offices connect to the head office via slow, heavily used connections.

A primary DNS server exists within the head office of the Riverside Corporation. Each branch office hosts a secondary DNS server. Users in the branch offices must be able to resolve domain names if the local secondary DNS server goes offline. The budget allows for the purchase of additional DNS servers.

You want to place another DNS server in each branch office while minimizing the amount of traffic on the WAN connections.

What should you do?

	A.	Configure the existing secondary DNS servers as the master name servers for the new secondary DNS servers.
	B.	Configure the new DNS servers as caching-only DNS servers.
	C.	Configure the new secondary DNS servers to receive zone transfers from the primary DNS server in the head office.
	D.	Configure the new secondary servers as forwarders.

27.

You are the network administrator for a medium-size network. All servers have been upgraded to Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

There are multiple subnets on the network. You need to configure a new server on Subnet 2 with a static IP address. You open the Internet Protocol (TCP/IP) Properties window on another server on the Subnet 2. The output is shown in the figure.

Based on this information, which of the following is a valid IP address to configure the new server with?

	A.	192.168.0.25
	B.	192.168.0.30
	C.	192.168.0.45
	D.	192.168.0.60

28.

You are the network administrator for your company. All servers have been upgraded to Microsoft Windows Server 2003.

The primary and secondary DNS servers are connected by slow links that are already heavily used. You want to reduce the amount of traffic on the WAN connection.

What should you do?

	A.	Decrease the TTL.
	B.	Increase the refresh interval.
	C.	Decrease the retry interval.
	D.	Alter the serial number.

29.

You are a network administrator for your company. Servers are running Microsoft Windows Server 2003 and Microsoft Windows 2000 Server.

SRV01 and SRV02 are running DNS on Windows Server 2003. SRV01 is the primary DNS server for the bayside.net zone. SRV02 is the secondary DNS server for the zone.

You run the Active Directory Installation Wizard (dcpromo.exe) on a server named SRV03 to create an Active Directory domain named bayside.net for the network. You also run the wizard on a computer named SRV04 to create an additional domain controller for the domain. SRV03 is located at the head office and hosts all of the operation's master roles. SRV04 is located at a branch office.

You need to prepare SRV03 to host an Active Directoryintegrated zone for bayside.net. You install the DNS server service on SRV03.

What should you do next?

	A.	Create an Active Directory application partition.
	B.	Create a secondary zone for bayside.net on SRV03.
	C.	Create a stub zone for bayside.net on SRV03.
	D.	Create a primary zone for bayside.net on SRV03.

30.

You are the network administrator for the Bayside company. All servers are running Microsoft Windows Server 2003.

A merger has just occurred between the Bayside and Riverside corporations. Each network maintains its own DNS servers. You want the DNS servers in Bayside to send all queries for hosts in the Riverside organization directly to the Riverside DNS servers.

What should you do?

	A.	Using the Forwarders tab from the zone's properties window, configure the Bayside DNS server to forward all name-resolution requests to the Riverside DNS servers.
	B.	Using the Forwarders tab from the DNS server's properties window, configure the Bayside DNS server to forward all name-resolution requests to the Riverside DNS servers.
	C.	Using the Forwarders tab from the DNS server's properties window, configure the Bayside DNS server to forward all name-resolution requests for clients in the Riverside domain to the Riverside DNS servers.
	D.	Using the Forwarders tab from the zone's properties window, configure the Bayside DNS server to forward all name-resolution requests for clients in the Riverside domain to the Riverside DNS servers.

31.

You are a network administrator for your company. Servers are running Microsoft Windows Server 2003 and client computers are running Microsoft Windows XP Professional. Computers are members of a domain called bayside.net.

You have installed DNS on two domain controllers named SRV01 and SRV02. The zone for bayside.net is Active Directoryintegrated.

Your company opens a new subsidiary in Canada that will use a separate DNS name-space. Administrators in Canada will configure SRV03 as a domain controller for an Active Directory domain named riverside.net. They will also add three more domain controllers running the DNS server service to the domain.

You need to ensure that SRV01 has information about all the name servers for riverside.net, including the name servers that are added after the new zone is created. Your solution must minimize the amount of disk space used to store DNS data on SRV01.

What should you do?

	A.	Create a stub zone for riverside.net on SRV01.
	B.	Configure conditional forwarding for riverside.net on SRV01.
	C.	Configure replication between SRV03 and SRV01.
	D.	Configure SRV01 as a secondary DNS server for canada.bayside.net.

32.

You are the network administrator for your organization. All servers are running Microsoft Windows Server 2003.

You have just finished installing and configuring a new DNS server for the network. The DNS server is still in the test environment.

You want to ensure that the DNS server is functioning before placing it on the network. You specifically want to verify that the DNS server is resolving hostname queries.

What should you do?

	A.	Ping the IP address of the DNS server.
	B.	Check the Event Viewer for any DNS-related events.
	C.	Use the Monitoring tab from the DNS server's properties window to test the configuration.
	D.	Verify that the appropriate records exist within the zone file.

33.

You are the network administrator for your company. All servers running critical network services have been upgraded to Microsoft Windows Server 2003.

The network maintains several UNIX hosts that use only DNS. There are also legacy clients on the network that use NetBIOS. The UNIX hosts cannot resolve the NetBIOS names of the legacy clients.

The UNIX hosts must be able to resolve NetBIOS names.

What should you do?

	A.	Enable DNS for WINS lookup.
	B.	Configure replication between DNS and WINS.
	C.	Install a WINS proxy agent on the network.
	D.	Configure DHCP to register NetBIOS names with the DNS server.

34.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. The network currently consists of a single subnet.

You need to subnet the existing network to optimize network traffic. You plan to use a class C network ID of 192.168.0.0. The network will be subdivided into 12 different subnets. There may be future plans to add an additional 2 subnets.

Which subnet mask should you choose?

	A.	255.255.255.224
	B.	255.255.255.240
	C.	255.255.255.248
	D.	255.255.255.252

35.

You are the network administrator for your company. All servers have been upgraded to Microsoft Windows Server 2003.

Due to budget constraints, you are only able to implement a single WINS server on a network that consists of two subnets. You place the WINS server on the subnet with the most users. A computer on the other subnet will be configured as a WINS proxy.

How should you proceed?

	A.	Install the WINS proxy component using the Add/Remove programs applet.
	B.	Install the WINS service and select the WINS proxy component during the installation.
	C.	Edit the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Parameters Registry key on the local computer and change the value of the EnableProxy parameter to 1.
	D.	Edit the local computer Registry and change the value of the WINSProxy parameter to 1.

36.

You are the administrator of a Windows Server 2003 network. The head office hosts a primary DNS server that is also used by the branch office.

You want to place a DNS server within the branch office location without increasing the network traffic on the WAN link.

What should you do?

	A.	Configure another primary DNS server in the branch office location.
	B.	Configure a secondary DNS server in the branch office location, but do not configure a master name server.
	C.	Configure a caching-only DNS server in the branch office location.
	D.	Configure a master name server in the branch office location.

37.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

There are a number of DNS servers on the network. DNS01 is a primary DNS server. You want to limit which secondary servers are permitted to receive zone updates from DNS01.

What should you do?

	A.	Use the Security tab from the zone's properties window to list servers that can receive updates.
	B.	Use the Zone Transfers tab from the zone's properties window to list servers that can receive updates.
	C.	Use the Security tab from the DNS server's properties window to list servers that can receive updates.
	D.	Enable zone transfers to all servers using the Zone Transfers tab from the zone's properties window.

38.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows 95 and Microsoft Windows 2000 Professional. All computers are members of the bayside.net domain.

Your company has just acquired another company with an existing domain called riverside.net. You plan to keep the existing network infrastructure and each domain will maintain its own DNS servers. You want BAYDNS, the DNS server for bayside.net, to send DNS queries for hosts in riverside.net to RIVDNS, the DNS server for riverside.net.

What should you do?

	A.	Open the BAYDNS properties dialog box. Use the Forwarders tab to configure BAYDNS to forward all name resolution requests for riverside.net to RIVDNS.
	B.	Open the bayside.net zone properties dialog box. Use the Forwarders tab to configure BAYDNS to forward all name resolution requests to RIVDNS.
	C.	Open the BAYDNS properties dialog box. Use the Forwarders tab to configure BAYDNS to forward all name resolution requests to RIVDNS.
	D.	Open the bayside.net zone properties dialog box. Use the Forwarders tab to configure BAYDNS to forward all name resolution requests for riverside.net to RIVDNS.

39.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

The company maintains a web server on the intranet. You have assigned an IPSec policy on this server.

You want to verify that all communication with the web server is being secured. You want to accomplish this with the least amount of administrative effort.

Which of the following tools should you use?

	A.	IP Security Policy management console
	B.	Network Monitor
	C.	IP Security Monitor
	D.	System Monitor

40.

You are the network administrator for your company. Servers have been upgraded to Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

You are implementing Software Update Services to streamline the process of applying updates to computers on the network. You need to install Software Update Services on an existing server.

What software components are required on the server before installing SUS?

Select the software components from the list on the right that are required to install WSUS. Place these software components in the list on the left.

	Internet Explorer 5.0 or later
	IIS 5.0 or later
	Active Directory
	NTFS system partition
	Service Pack 1
	SQL Server 2005

41.

You are the network administrator for your company. The company maintains a single Active Directory domain. All servers are running Microsoft Windows Server 2003.

You have installed SUS on a member server. You need to configure client computers to use the SUS server.

You create a new Group Policy Object (GPO) for the appropriate OU. When you open the GPO to edit the automatic update settings, they are not available.

What is causing the problem?

	A.	You do not have sufficient privileges to edit the policy settings.
	B.	SUS must be installed on a domain controller.
	C.	You must configure the settings on each workstation.
	D.	The Automatic Updates ADM file has not been loaded.

42.

You are the network administrator of a Microsoft Windows Server 2003 network. You have just finished installing Software Update Services. The server is configured and ready to be placed on the network.

You need to install the updated version of Automatic Updates on the client computers. The computers are running a variety of platforms.

Which of the following platforms will support the updated version of Automatic updates?

Select the operating systems from the list on the right that will support SUS. Place these operating systems in the list on the left.

	Windows 2000
	Windows 95
	Windows Me
	Windows XP
	Windows 98

43.

You are the administrator of a Windows Server 2003 network. You have created a security template that is applied to all new servers on the network.

You discover that the account lockout threshold on one of the network servers has been changed. You are concerned that several other settings might have been changed.

You want to determine if any other settings on the server have been changed.

What should you do?

	A.	Open the Security log to see if additional configuration changes have been made.
	B.	Run the Resultant Set of Policy tool on the server.
	C.	Compare the existing settings against the original template using the Security Configuration and Analysis.
	D.	Open the Active Policy container with the IP Security Monitor.

44.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003 and have been placed in the server OU. The company uses a single domain called bayside.net.

You need to configure the security settings on six member servers. You want all six servers to have the same security settings. You need to accomplish this using the least amount of administrative effort.

What should you do?

	A.	Configure the security settings on each server.
	B.	Configure a security template and import it on each server.
	C.	Configure a security template and deploy it through a GPO.
	D.	Configure a security template and deploy it using SUS.

45.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

You have installed SUS on a member server. You want to enable the client computers to use an SUS server for automatic updates.

What should you do?

	A.	Set the value for the UseWUServer to 1.
	B.	Set the value for the AUOptions to 2.
	C.	Configure the value for WUServer to point to the URL of the SUS server.
	D.	Configure the value for the WUStatusServer to point to the URL of the SUS server.

46.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003. SUS is installed on a member server.

You have enabled Automatic Updates on a Windows XP workstation to use SUS. You now want to specify the SUS server from which the workstation will download options.

Which Registry value should you configure?

	A.	UseWUServer
	B.	AUOptions
	C.	WUServer
	D.	WUStatusServer

47.

You are the new network administrator for your company. You maintain several servers running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

The previous administrator left no documentation about the existing servers. Managers have asked you to document server configuration. Your documentation must include the following:

	Misconfigurations with the operating system
	Identification of missing security updates

You need to have this information as soon as possible.

What should you do?

	A.	Install mbsacli.exe and run the program from your administrative computer.
	B.	Install HFNetHCK.exe and run the program on each server you want to document.
	C.	Open and run the Security Configuration and Analysis utility on each server.
	D.	Open the security policy on each computer and export the settings to a database.

48.

You are the network administrator for your company. All servers have been recently upgraded from Microsoft Windows 2000 Server to Microsoft Windows Server 2003.

You have assigned IPSec policies to several network servers. You want to view IPSec statistics using the IP Security Monitor on a Windows Server 2003 server.

How can you open the IP Security Monitor utility in Windows Server 2003?

	A.	Using Administrative Tools located on the Start menu
	B.	Using the IP Security Monitor icon within the Control Panel
	C.	Using the run command and typing ipsecmon.exe
	D.	Using the Microsoft Management Console and adding the IP Security Monitor snap-in

49.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

The internal network is using the private IP address range of 192.168.0.0/24. DHCP is being implemented. Two servers will continue to use static IP addresses.

You want to ensure that there are no address conflicts on the network.

What should you do?

	A.	Configure client reservations for both servers.
	B.	Exclude the static IP addresses from the scope.
	C.	Place the static IP addresses within a separate scope.
	D.	Configure the scope options on the DHCP server.

50.

You are the network administrator for your company. Your organization is still in the process of migrating to Microsoft Windows Server 2003. Some of the servers are still running Microsoft Windows 2000 Server.

You have assigned IPSec policies to the servers. You want to monitor the servers to ensure that communication between servers is secured. You use the IP Security Monitor snap-in from your computer to monitor the servers across the network. However, you discover that you can monitor only computers running Windows Server 2003.

What is causing the problem?

	A.	You do not have administrative permissions on the servers running Windows 2000.
	B.	IP Security Monitor cannot be used to monitor computers running Windows 2000.
	C.	The Windows 2000 servers are not members of the local domain.
	D.	The Network Monitor driver is not installed on the Windows 2000 servers.

51.

You are the network administrator for your company network. All servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP Professional.

Your company is restructuring the network and creating 20 subnets using a Class A IP address. It plans to add an additional 8 subnets within the next year.

Which of the following subnet masks should you use?

	A.	255.192.0.0
	B.	255.224.0.0
	C.	255.240.0.0
	D.	255.248.0.0

52.

You are trying to install Software Updates Services on a member server running Microsoft Windows Server 2003. The installation of the software continually fails. You verify that the computer meets the hardware requirements. The server is also running IIS 5.0 and Internet Explorer 6.0, and all partitions except the system partition are formatted with FAT.

What could be causing the problem?

	A.	Service Pack 1 is not installed.
	B.	The partition storing the updates is not formatted with FAT.
	C.	IIS must be uninstalled.
	D.	An NTFS partition has not been detected.

53.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

The company has opened a new branch office. You are in charge of implementing dynamic IP addressing in the new branch office. There is an existing DHCP server in the head office.

Fault tolerance is a priority. Client computers in the branch office should be able to obtain an IP address if the WAN link to the head office becomes unavailable.

What should you do? (Select three.)

	A.	Place a DHCP server in the branch office location.
	B.	Configure the local DHCP server with 80% of the available IP addresses. Configure the DHCP server within the head office with the remaining 20% of the IP addresses.
	C.	Enable the DHCP Relay Agent on a server within the branch office.
	D.	Configure all clients with the IP address of both DHCP servers.

54.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

Most client computers are running Microsoft Windows XP Professional. A few client computers are still running Windows 95. You have installed DNS on a member server in the domain. You notice that the Windows 95 clients are not dynamically updating their host records with the DNS server.

What should you do?

	A.	Configure DNS for dynamic updates.
	B.	Configure the properties of TCP/IP on the Windows 95 workstations, and enable them for dynamic updates.
	C.	Configure the DHCP server to perform updates for legacy clients.
	D.	Place a DHCP relay agent on the network.

55.

You are the junior network administrator of a Windows Server 2003 network. The senior network administrator has requested that you install DHCP on an existing standalone server.

You install the service and configure the scope. When you attempt to authorize the DHCP server within Active Directory, the Authorize option is not available within the DHCP console.

What is causing this to occur?

	A.	You are not a member of the DHCP Administrators group.
	B.	You are a member of the Enterprise Admins group.
	C.	DHCP has been installed on a standalone server and, therefore, does not need to be authorized.
	D.	You must authorize the DHCP server using the Active Directory Users and Computers snap-in.

56.

You are the network administrator for a large insurance company. All servers are running Microsoft Windows Server 2003 and are members of the bayside.net domain.

The company has recently opened a new subsidiary. The domain for the subsidiary is sales.bayside.net. You have delegated sales.bayside.net to another DNS server on the network.

You want to ensure that the name server for bayside.net is notified any time a new authoritative name server is added to the sales.bayside.net zone.

What should you do?

	A.	Using the Name Servers tab from the sales.bayside.net zone, configure the DNS server to notify the DNS server in the parent domain of any changes.
	B.	Configure a stub zone on the DNS server within the parent domain.
	C.	Configure a DNS server within the bayside.net zone to be a secondary server to the sales.bayside.net zone.
	D.	Nothing. The name server for bayside.net will be automatically notified.

57.

You are the network administrator for your company. Servers are running Microsoft Windows Server 2003. All computers are members of the bayside.net domain.

You have installed DNS on all the domain controllers. The zone for bayside.net is Active Directoryintegrated.

You want to verify that replication between DNS servers is occurring as it should.

Which tool can you use to verify this?

	A.	System Monitor
	B.	Replication Monitor
	C.	DNS management console
	D.	DNS Monitor

58.

You are the network administrator for your company. Servers are running Microsoft Windows Server 2003.

Your company has recently moved its website to another server. Clients now report that they no longer can view the site.

Upon further examination, you discover that the DNS server is providing clients with the IP address of the old web server. You suspect a problem with the cache.

What should you do?

	A.	Uninstall the DNS server service.
	B.	Delete the cache.dns file.
	C.	Use the Clear Cache option from the DNS server's property window.
	D.	Use the Clear Cache option from the Action menu.

59.

You are the network administrator for your company. Servers are running Microsoft Windows Server 2003. Client computers are running Microsoft Windows XP professional.

You are testing Software Update Services within a test environment on two computers before implementing the service in the production environment. You install Software Update Services on a standalone server.

You need to configure a client computer in the test environment to use the SUS server. You want to configure automatic updates so that the local administrator is notified of downloads and installations.

What should you do?

	A.	Edit the Registry and configure the UseWUServer Registry value.
	B.	Edit the Registry and configure the appropriate value for the AUOptions enTRy.
	C.	Install the Automatic Updates ADM file. Configure the WUServer option within a Group Policy.
	D.	Install the Automatic Updates ADM file. Configure the SUSServer option through a Group Policy.

60.

You are the network administrator for your company. All servers are running Microsoft Windows Server 2003.

The company has recently configured a web server on the intranet. You want to monitor and log network activity coming to and going from the web server.

Which of the following tools can you use? (Select two.)

	A.	System Monitor
	B.	IP Security Monitor
	C.	Network Monitor
	D.	Event Viewer