Self Test

A Quick Answer Key follows the Self Test questions. For complete questions, answers, and explanations to the Self Test questions in this chapter as well as the other chapters in this book, see the Self Test Appendix.

Connecting the LAN to the Internet

1.	You have five Windows XP clients on a network with a Windows Server 2003 server. The server has an always-on Internet connection with an ISP. What service can you install on the server to allow the clients to access the Internet, without requiring you to obtain additional IP addresses from your ISP? PPTP NAT DHCP DNS
2.	You are configuring a simple network with two computers, both running Windows Server 2003. Both will be used as Web servers and must be accessible over the Internet. You have chosen to assign an Internet IP address to each machine, and you want to configure a single Internet connection for use by both machines. Which of the following is the best strategy? Use a routed connection. Use NAT. Use ICS. Two separate connections are required.
3.	Your network includes a Windows Server 2003 computer and several workstations running Windows 2000 and Windows XP. You need to configure the server to provide shared Internet access to all machines on the network. The server will also act as a Web server. In addition, one of the workstations is providing an FTP service and requires its own Internet IP address. Which solution will address all of these requirements? ICS A hardware router NAT IAS
4.	You have a DHCP server on the network that automatically assigns IP addresses to clients. You are configuring a NAT server to provide shared Internet access. You want clients to use internal addresses from the same pool, whether or not they are using the Internet. What is the most efficient way to do this? Divide the address pool between the NAT server and the DHCP server. Define identical address pools on the NAT server and the DHCP server. Configure NAT to forward IP addressing requests to the DHCP server. Remove the DHCP server from the network and use NAT exclusively.

Answers

1.	B
2.	A
3.	C
4.	C

Implementing Virtual Private Networks (VPNs)

5.	You are planning a VPN to allow traveling employees to access the network from remote locations. Employees will be using a variety of ISPs to connect to the Internet. You want to ensure that the VPN offers end-to-end encryption between the VPN client and server for maximum security. Which VPN protocol should you use? PPTP L2TP only L2TP and IPSec PPP
6.	You have configured a VPN server running RRAS under Windows Server 2003. A number of remote workstations are able to access the network by connecting to the Internet using local access methods and establishing a VPN connection. Which of the following terms describes this type of VPN? Router-to-router Point-to-point Internet-based One-way
7.	You have configured a router-to-router VPN using two Windows Server 2003 computers as VPN servers, each with a local Internet connection. You have configured the VPN servers at each end of the VPN to use the PPTP protocol. Which of the following types of encryption will the VPN use in this configuration? L2TP MPPE IPSec EAP
8.	You need to configure a VPN connection between the local network and a remote branch. The remote branch has access to a dial-up ISP and will be billed by the hour by the ISP for the time spent online. Which of the following is the best strategy to configure the VPN? Use a demand-dial connection. Use a persistent connection. Use dial-up access via RRAS. Create a dedicated WAN link.

Answers

5.	C
6.	C
7.	B
8.	A

Using Internet Authentication Service (IAS)

9.	You have three RRAS servers configured for VPN access for remote clients. The servers are currently using Windows authentication, and you wish to use IAS for centralized authentication. You have installed the IAS component on a Windows Server 2003 computer. What additional task is necessary to enable IAS authentication? Install IAS on all RRAS server computers. Configure each RRAS server to use RADIUS authentication. Install a RADIUS client. Choose authentication protocols.
10.	You have installed the IAS component on a Windows Server 2003 server. You are planning the authentication strategy for the IAS server and have configured the IAS server to use EAP for authentication. Which of the following protocols are supported by EAP? (Select all that apply.) MD5 CHAP PAP SPAP EAP-TLS
11.	You have an IAS server running Windows Server 2003. It supports a group of RRAS servers used to manage VPN connections for clients. You are configuring the authentication methods for the IAS server and want to allow the clients to use smart cards for secure and convenient authentication. Which of the following authentication protocols should you select? MS-CHAP EAP-TLS MD5 CHAP MS-CHAP v2
12.	You have configured an RRAS server on one Windows Server 2003 computer and an IAS server on another, and configured the RRAS server to use the IAS server for authentication. In RADIUS terminology, which computer(s) are referred to as network access servers? The IAS server The RRAS servers The clients of the RRAS server Both the IAS and RRAS servers
13.	During a security audit, you are monitoring network traffic and notice that plaintext versions of passwords are passing through the network. You are using an IAS server to handle authentication. Which protocol do you need to disable at the IAS server to prevent this security risk? MS-CHAP PAP EAP-TLS CHAP
14.	You have an IAS server running Windows Server 2003. You need to enable and configure EAP to support clients that use EAP authentication. In the IAS MMC snap-in, where do you find the options for configuring EAP? Properties Remote Access Policies Protocols Connection Request Processing
15.	You wish to create client software for VPN clients to connect to the network so that clients do not need to manually specify the VPN server, tunneling protocol, and other settings. Which program allows you to customize the client software? Connection Manager Connection Manager Administration Kit RRAS MMC snap-in IAS MMC snap-in

Answers

9.	B
10.	A, D
11.	B
12.	B
13.	B
14.	B
15.	B