

| 1. You are the network administrator for Alecnet .com. Alecnet has 20,000 users in 20 physical locations worldwide. Alecnet is expecting to grow by 50 percent the next five years. Alecnet recently became a subsidiary of Humongous Insurance. Humongous Insurance has five other subsidiaries. Humongous Insurance has 100,000 users in 100 physical locations worldwide. Humongous Insurance uses the 10.0.0.0/8 network and requires that all subsidiaries integrate into this network. The network design team at Alecnet provides you with a network design for integrating into the Humongous Insurance network. The design specifies that Alecnet will use a single block of IP network numbers to assign IP addresses to its network. You need to plan the IP address space to meet the design specification. You need to request a block of IP addresses from Humongous Insurance that will accommodate all Alecnet users. To reduce the difficulty of obtaining the addresses and to conserve the Humongous Insurance address space, you want to request the smallest block of IP addresses that meets the design specification. What should you do? A. Request a 10.0.0.0 block of IP addresses with an 8-bit subnet mask from Humongous Insurance. B. Request a 10.0.0.0 block of IP addresses with a 16-bit subnet mask from Humongous Insurance. C. Request a 10.0.0.0 block of IP addresses with a 24-bit subnet mask from Humongous Insurance. D. Request a 10.0.0.0 block of IP addresses with a 32-bit subnet mask from Humongous Insurance. Answer: B |
| 2. You are the network administrator for Alecnet . The company has a main office and two branch offices. The network in the main office contains 10 servers and 100 client computers. Each branch office contains 5 servers and 50 client computers. Each branch office is connected to the main office by a direct T1 line. The network design requires that company IP addresses must be assigned from a single classful private IP address range. The network is assigned a class C private IP address range to allocate IP addresses for servers and client computers. Alecnet acquires a company named Acme. The acquisition will increase the number of servers to 20 and the number of client computers to 200 in the main office. The acquisition is expected to increase the number of servers to 20 and the number of client computers to 200 in the branch offices. The acquisition will also add 10 more branch offices. After the acquisition, all branch offices will be the same size. Each branch office will be connected to the main office by a direct T1 line. The new company will follow the Alecnet network design requirements. You need to plan the IP addressing for the new company. You need to comply with the network design requirement. What should you do? A. Assign the main office and each branch office a new class A private IP address range. B. Assign the main office and each branch office a new class B private IP address range. C. Assign the main office and each branch office a subnet from a new class B private IP address range. D. Assign the main office and each branch office a subnet from the current class C private IP address range. Answer: C |
| 3. You are the systems engineer for Alecnet . Alecnet has 20,000 users in a large campus environment located in London. Each department in the company is located in its own building. Each department has its own IT staff. The company's network is divided into several IP subnets that are connected to one another by using dedicated routers. Each building on the company's main campus contains at least one subnet, and possibly up to five subnets. Each building has at least one router. All routers use RIP v2 broadcasts. A new office in Dortmund has 25 users. Dortmund is connected to the main office with a Frame Relay line. Dortmund installs a server with RRAS and implements RIP v2. Later the Dortmund admin reports that his router is not receiving routing table updates from the routers at the main office. He must manually add routing entries to the routing table to enable connectivity between the locations. You investigate and discover that the RIPv2 broadcasts are not being received at the Dortmund office. You also discover that no routing table announcements from the Dortmund office are being received at the main office. You need to ensure that the network in the Dortmund office can communicate with the main campus network and can send and receive automatic routing table updates as network conditions change. What should you do to the router in the Dortmund office? A. Configure the router to use RIPv1 broadcasts B. Configure the router to use auto-static update mode C. Add the IP address ranges of the main campus network to the routers accept list and announce list D. Add the IP addresses of the main campus routers to the router's neighbors list Answer: D |
| 4. You are the administrator of the Alecnet company network. The network consists of a single Active Directory domain Alecnet .com. The network includes 20 servers running Windows Server 2003 and 200 client computers running Windows XP Professional. The office uses a single class C private IP address range. The company announces a major expansion. Alecnet will open 12 branch offices. The 12 branch offices will connect to the existing office by direct T1 lines. Each branch office will have the same number of computers as the main office. You need to plan the IP addressing for the new company. You want to assign all company IP addresses from a single classful private IP address range. What should you do? A. Assign each office a new class C private IP address range. B. Assign each office a new class B private IP address range. C. Assign each office a subnet from a new class B private IP address range. D. Assign each office a subnet from the current class C private IP address range. Answer: C |
| 5. You are the network administrator for Alecnet .com. Alecnet has offices in New York, Copenhagen and Ankara. The network consists of a single Active Directory domain and three sites. The sites are named NYsite, CopSite, and AnkSite. Alecnet is adding a new division at the New York office for publishing fiction books. You create a new organizational unit (OU) named Fiction for the fiction division. You add a new network segment and subnet for the fiction division. You plan to place new Windows XP Professional computers for the fiction division in the new subnet. You also plan to add a new domain controller to NYSite. You need to ensure that users in the fiction division use the domain controllers in the New York office when logging on to the network. What should you do? A. Decrease the metric for the default gateway on the new Windows XP Professional computers. B. Create a new subnet object for the new subnet. Add the new subnet object to NYSite. C. Configure the location attribute for the new Windows XP Professional computers to be NYSite. D. Move the domain controller objects for the domain controllers in the New York office to the Fiction OU. Answer: B |
| 6. You are a network administrator for Alecnet . All servers run Windows Server 2003. All client computers run Windows XP Professional. The network contains a single DHCP server that services two subnets named Subnet CK1 and Subnet CK2 , as shown in the work area. All servers and the administrator client computer have manually assigned IP addresses. All other client computers are DHCP clients. The router on your network fails and is replaced by another router. After the router is replaced, client computers on Subnet CK2 cannot receive IP addressing from the DHCP server. You need to configure an appropriate host to be a DHCP relay agent. Which component should you use? To answer, select the appropriate component in the work area. Answer: Explanation: Select the Print Server. DHCP relay agents intercept DHCP Discover packets and forward them to a remote DHCP server whose address has been preconfigured. Although DHCP Relay Agent is configured through Routing And Remote Access, the computer hosting the agent does not need to be functioning as an actual router between subnets. |
|
|
| 8. You are a network administrator for Alecnet . All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers, 300 Windows 2000 Professional computers, and 150 Windows XP Professional computers. According to the network design specification, the Kerberos version 5 authentication protocol must be used for all client computers on the internal network. You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network. What should you do? A. On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure channel traffic. B. Replace all Windows 98 computers with new Windows XP Professional computers. C. Install the Active Directory Client Extension software on the Windows 98 computers. D. Upgrade all Windows 98 computers to Windows NT workstation 4.0. Answer: B |
| 9. You are the security analyst for Alecnet . The network consists of a single Active Directory domain Alecnet .com. All servers run Windows Server 2003. The network currently does not have a connection to the Internet. You are in the process of designing an Internet connection solution for Alecnet . Alecnet 's Internet security policy includes the following requirements: 1. Traffic that originates from outside the Alecnet network must never be passed to the Alecnet intranet. 2. Internal Alecnet resources must not be directly accessible from the Internet. 3. Alecnet 's public Web site must not contain any confidential Alecnet information. 4. Alecnet 's public Web site must be accessible from the Internet, even in the event of the failure of any Alecnet -owned network component. You design a network solution that provides strict access control to the Alecnet intranet by means of a firewall. Your new design includes a perimeter network, which contains resources that external users or computers might need to access. Your design also includes three computers running intrusion-detection software: ISD1, IDS2, and IDS3. You now need to plan the placement of five servers on the network in accordance with Alecnet 's Internet security policy. How should you place the servers to comply with the security policy? To answer, drag the appropriate server role to the correct network location in the Network Diagram. Explanation: We must ensure that traffic from outside the Alecnet network never passes to the Alecnet intranet and that internal Alecnet resources aren't directly accessible from the Internet. In addition, the public Web site must be accessible from the Internet even in the event of the failure of any Alecnet -owned network component. To ensure that traffic from outside the Alecnet network never passes to the Alecnet intranet but can access the public web site, we should place the Web server outside the firewall. For security reasons, services that require access to the Internet should be placed in the perimeter network. These include Email forwarders and VPN servers. File servers that store user folders, and email servers that store mailboxes should be placed in the intranet. |
|
10. You are the network administrator for a new branch office of Alecnet . The office network is connected to the Internet by a T1 line. Alecnet 's Internet service provider (ISP) gives you a single public IP address and provides firewall services to protect the office network. The office network includes five windows XP Professional client computers and a Windows Server 2003 computer named AlecnetA. All client computers are configured to use DHCP to obtain their IP configuration settings. Alecnet A is configured as a DHCP server and contains two network adapters. You connect one network adapter to the ISP connection, and you connect the other network adapter to the office network. You want to configure Alecnet A so that client computers can access the Internet. Which two courses of action should you take? (Each correct answer presents part of the solution. Choose two) A. Remove the DHCP Server service. B. Install the DNS Server service. C. Run the route command to add a route to the internal network. D. Assign the public IP address to the external network adapter. Install and configure Routing and Remote Access. Answer: B, D |
| 11. You are the administrator for Alecnet . The network consists of a single active directory domain named Alecnet .com. All servers run windows server 2003 When the network was designed, the design team set design specifications. After the network was implemented, the deployment team set baseline specifications. The specifications for broadcast traffic are: 1. The design specifications requires that broadcast traffic must be 5 percent or less of total network traffic 2. The baseline specifications showed that the broadcast traffic is always 1 percent or less of the total network traffic during normal operation You need to monitor the network traffic and find out if the level of broadcast traffic is within the design and baseline specs. You decide to use network monitor. After monitoring for 1 hour, you observe the results shown in the exhibit: You need to report the results of your observations to management. Which 2 actions should you take? A. Report that broadcast traffic is outside of the baseline specs B. Report that the broadcast traffic is outside of the design specs C. Report that the broadcast traffic is within the design specs D. Report that the broadcast traffic is within the baseline specs Answer: A, B |
| 12. You are the network administrator for Alecnet . The network consists of a single Active Directory domain named Alecnet .com. The network contains two IP subnets connected by a Windows Server 2003 computer running Routing and Remote Access. All servers run Windows Server 2003. All client computers run Windows XP Professional. Each subnet contains a domain controller. Each subnet contains a DHCP server, which provides TCP/IP configuration information to the computers on only its subnet. The relevant portion of the network is shown in the exhibit. You recently implemented a Microsoft Internet Security and Acceleration (ISA) Server 2000 array on the network to provide Internet connectivity. The ISA Server array uses Network Load Balancing on the internal adapters. The array's Network Load Balancing cluster address is 172.30.32.1. You configure the DHCP server on Subnet1 to provide the array's Network Load Balancing cluster address as the default gateway. You configure the DHCP server on Subnet2 to provide the IP address 172.30.64.1 as the default gateway for Subnet2. Users on Subnet2 report that they cannot connect to Internet-based resources. They can successfully connect to resources located on Subnet1. Users on Subnet1 can successfully connect to Internet-based resources. You investigate and discover that no Internet requests from computers on Subnet2 are being received by the ISA Server array. You need to provide Internet connectivity to users on Subnet2. What should you do? A. Configure the DHCP server on Subnet2 to provide the address 172.30.32.1 as the default gateway. B. Configure the DHCP server on Subnet2 to provide the address 172.30.32.2 as the default gateway. C. On the Routing and Remote Access server, add a default route to 172.30.32.1. D. On the Routing and Remote Access server, add a default route to 131.107.72.17. Answer: C |
| 13. You are a network administrator for Alecnet . The network consists of multiple physical segments. The network contains two Windows Server 2003 computers named Alecnet SrvA and Alecnet SrvB, and several Windows 2000 Server computers. Alecnet SrvA is configured with a single DHCP scope for the 10.250.100.0/24 network with an IP address range of 10.250.100.10 to 10.250.100.100 Several users on the network report that they cannot connect to file and print servers, but they can connect to each other's client computers. All other users on the network are able to connect to all network resources. You run the ipconfig.exe /all command on one of the affected client computers and observe the information in the following table: You need to configure all affected client computers so that they can communicate with all other hosts on the network. Which two actions should you take? (Each correct answer presents part of the solution. Choose two) A. Disable the DHCP service on Alecnet SrvB. B. Increase the IP address range for the 10.250.100.0/24 scope on Alecnet SrvA. C. Add global DHCP scope options to Alecnet SrvA for default gateway, DNS servers, and WINS servers. D. Delete all IP address reservation in the scope on Alecnet SrvA. E. Run the ipconfig.exe /renew command on all affected client computers. F. Run the ipconfig.exe /registerdns command on all affected client computers. Answer: A, E |
| 14. You are the network administrator for Alecnet . The network consists of a single Active Directory domain named Alecnet .com. You configure a new Windows Server 2003 file server named Alecnet Srvl. You restore user files from a tape backup, and you create a logon script that maps drive letters to shared files on Alecnet Srv1. Users report that they cannot access Alecnet Srvl through the drive mappings you created. Users also report that Alecnet Srvl does not appear in My Network Places. You log on to Alecnet Srvl and confirm that the files are present and that the NTFS permissions and share permissions are correct. You cannot access any network resources. You run the ipconfig command and see the following output. You need to configure the TCP/IP properties on Alecnet Srv1 to resolve the problem. What should you do? A. Add Alecnet .com to the DNS suffix for this connection field. B. Configure the default gateway. C. Configure the DNS server address. D. Configure a static IP address. Answer: D |
| 15. You are a network administrator for Alecnet . The network consists of a single Active Directory domain named Alecnet .com. All domain controllers and member servers run Windows Server 2003, Enterprise Edition. All client computers run Windows XP Professional. Alecnet has one main office and one branch office. The two offices are connected to a T1 WAN connection. There is a hardware router at each end of the connection. The main office contains 10,000 client computers, and the branch office contains 5,000 client computers. You need to use DHCP to provide IP addresses to the Windows XP Professional computers in both offices. You need to minimize network configuration traffic on the WAN connection. Your solution needs to prevent any component involved in the DHCP architecture from becoming a single point of failure. What should you do? A. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster. Configure the branch office router as a DHCP relay agent. B. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster. At the branch office, configure a Windows Server 2003 computer as a DHCP relay agent. C. At the main office, configure two Windows Server 2003 computers as a DHCP server cluster. At the branch office, configure two Windows Server 2003 computers as a DHCP server cluster. D. At the main office, configure two Windows Server 2003 computers as DHCP servers. Configure one DHCP server to handle 80 percent of the IP address scope and the other DHCP server to handle 20 percent. Configure the branch office router as a DHCP relay agent. Answer: C |
| 16. You are the network administrator for Alecnet .com. The network consists of a single Active Directory domain named Alecnet .com. All servers run Windows Server 2003. All client computers run Windows XP Professional. The network also contains 10 network printers. All servers have manually configured IP addresses. The client computers and network printers receive their TCP/IP configuration information from a DHCP server. Alecnet IP policy states that each of the network printers will always be configured with the same IP address. You configure a DHCP server and create a DHCP scope as shown in the exhibit. Users report that they cannot submit print jobs to any of the network printers. You investigate and discover that none of the network printers are receiving their IP addresses from the DHCP server. You need to ensure that the network printers receive their IP addresses from DHCP. What should you do? A. Remove the IP address reservations for the network printers from the DHCP scope. B. Delete the IP address exclusion range for the network printers from the DHCP scope. C. Add the 009 LPR Servers option to the DHCP server options. D. Enable address conflict detection on the DHCP server. Answer: B |
| 17. You are the network administrator for Alecnet . Alecnet has an internal network and a perimeter network, as shown in the work area. The internal network consists of a single Active Directory domain Alecnet .com. The internal network contains a Windows Server 2003 domain controller named DC1, which runs the DNS Server service. The internal network also contains a Windows Server 2003 file server named Alecnet 1, which runs the DHCP Server service. The network contains 500 Windows XP Professional computers. The perimeter network contains a public Web server named Web CK1 . The internal network is connected to the perimeter network by a firewall. The perimeter network is connected to the Internet. You need to plan an IP address strategy. The IP address strategy must provide TCP/IP connectivity from the internal network to Web CK1 . Alecnet wants to reduce administrative overhead by automatically assigning IP addresses whenever possible. You need to choose the appropriate IP addressing distribution method for the computers on the networks. To answer, drag the appropriate IP addressing distribution method or methods to the correct computer or computers in the work area. Explanation: Static and dynamic routing both provide the same level of router performance. The drawbacks of static routing are the amount of manual maintenance the process requires and the routers' inability to compensate for changes in the network configuration. Dynamic routing enables routers to compensate for a failed router or WAN link, but it can generate a considerable amount of additional network traffic. Thus to comply with the requirements of providing TCP/IP connectivity from the internal network to Web CK1 and still reducing administrative overhead, the above configuration will be the solution. |
| 18. You are the network administrator for Alecnet . The network consists of a single Active Directory domain Alecnet .com. All servers run Windows Server 2003. All client computers run Windows XP Professional. The network consists of three physical subnets, which corresponds to the three buildings on Alecnet 's campus, as shown in the Network Diagram exhibit. All servers have manually configured IP addresses. All client computers receive their TCP/IP configuration information from a DHCP server located on the Building1 subnet. The DHCP server has one scope configured for each subnet. Users on the Building2 subnet and the Building3 subnet report that they periodically cannot connect to network resources located on any subnet. You discover that during times of high network usage, client computers in Building2 and Building3 are configured as shown in the Network Connection Details exhibit. You need to ensure that all client computers receive valid IP addresses for their subnet even during times of high network usage. What should you do? A. Install one DHCP server on the Building2 subnet and one on the Building3 subnet. On each DHCP server, configure identical scopes for each subnet. B. Install one DHCP server on the Building2 subnet and one on the Building3 subnet. On each DHCP server, configure a single subnet-specific scope. C. Configure one DHCP relay agent on the Building2 subnet and one on the Building3 subnet to forward DHCP requests to the Building1 subnet DHCP server. D. Configure an administrative template in the Default Domain Policy Group Policy object (GPO) to disable Automatic Private IP addressing (APIPA) on the client computers. Answer: B |
| 19. You are the network administrator for Alecnet .com. The relevant portion of the network is shown in the exhibit. All servers run Windows Server 2003. Each subnet of the network contains 100 Windows XP Professional computers. Each subnet also contains a DHCP server, which provides TCP/IP configuration information to all computers on its local subnet. You create and configure Subnet3 for a new department at your company. Users in Subnet3 report that they cannot connect to resources located on servers in Subnet1 and Subnet2. When they attempt to connect to these resources, they receive the following message: "Server not found". The users can successfully connect to resources located on servers in Subnet3. Users in Subnet1 and Subnet2 report that they cannot connect to resources located on servers in Subnet3. When they attempt to connect to these resources, they receive the following error message: "Server did not respond in a timely manner". The users can successfully connect to resources in both Subnet1 and Subnet2. You need to ensure that all client computers can connect to server-based resources an all subnets. What should you do? A. Configure the DHCP server in Subnet3 to provide a subnet mask of 255.255.255.0 B. Configure the DHCP servers in Subnet1 and Subnet2 to provide a subnet mask of 255.255.0.0. C. Configure the Alecnet 2 Interface E1 to use a subnet mask of 255.255.0.0. D. Configure the IP address of the Alecnet 2 Interface E0 as the default gateway for Subnet3. E. Configure the IP address of the Alecnet 2 Interface E1 as the default gateway for Subnet2. Answer: A |
| 20. You are the administrator of a network at Alecnet . The network consists of a single Active Directory domain Alecnet .com. All servers run Windows Server 2003. Client computers run either Windows XP Professional or Windows 98. All Windows 98 computers have the Active Directory Client Extensions software installed. The network consists of three physical subnets. Each subnet contains a domain controller and a server that runs DHCP. Each subnet also contains a server that runs both the DNS Server service and the WINS service. All client computers receive their TCP/IP configuration from the DHCP server that is located on their local subnet. All of the Windows 98 computers are located on a single subnet. The DHCP scope on this subnet is configured with the options shown in the exhibit. All DHCP servers are configured with similar options. Users of the Windows 98 computers report that they cannot connect to resources on the Windows Server 2003 computers located on any subnet. When they attempt to connect to a shared resource by using \\servername\sharename in the Run command, they receive the following error message: "Server not found". The users can successfully connect to Web-based resources located on the same servers. When you attempt to connect to the servers by using the ping command on an affected Windows 98 computer you can connect successfully. The users of the Windows XP Professional computers do not report the same problems. You need to ensure that the users of the Windows 98 computers can connect to shared resources on the Windows Server 2003 computers. What should you do? A. On the affected subnet's DHCP server, configure the scope options to use the Windows 98 vendor class. B. On the affected subnet's DHCP server, remove the WINS/NBT Node Type from the scope options. C. On each DHCP server, remove the Microsoft Disable NetBIOS Option from the scope options. D. On each DHCP server, add the NetBIOS over TCP/IP NBDD DHCP scope option to the scope options. Answer: C |
| 21. You are the network admin for Alecnet . Your network contains 3 subnets. All servers have manually assigned IP addresses while all clients are configured to receive an address from a DHCP server. The DHCP server is located in Site 1. The DHCP server has a scope configured for each subnet. Users in site 2 and site 3 are complaining that periodically they cannot connect to resources located on any subnet. You discover that during times of peak usage users are receiving an IP address in the 169.254.x.x address range. You need to ensure that all client computers receive an address from their subnet even during times of peak usage. What should you do? A. Install one DHCP server in site 2 and site 3. On each DHCP server, configure identical scopes for each subnet B. Install one DHCP server in Site 2 and Site 3. On each DHCP server configure a single subnet specific scope C. Configure a DHCP Relay agent on Site 2 and Site 3 D. Configure a GPO on the domain that disables APIPA Answer: B |
| 22. You are the security analyst for Alecnet .com. The network consists of Alecnet 's intranet and a perimeter network. The networks are separated by a firewall. Alecnet 's intranet consists of a single Active Directory domain named corp. Alecnet .com. The perimeter network consists of a DNS domain named Alecnet .com. The perimeter network contains publicly accessible Web servers. The intranet contains a Windows Server 2003 DNS server named Alecnet 1. Alecnet 1 hosts an Active Directory-integrated primary zone for the corp. Alecnet .com domain. Alecnet 1 also hosts a secondary zone that is not integrated with Active Directory for the Alecnet .com domain. The perimeter network contains a Windows Server 2003 DNS server named Alecnet 2. Alecnet 2 is authoritative for the Alecnet .com DNS domain, which contains the resource records for the publicly accessible servers. Alecnet 1 is configured to forward requests to Alecnet 2. Alecnet 2 is configured with root hints. Alecnet 's written DNS security includes the following requirements: 1. The internal DNS namespace must never be accessible by external users or computers. 2. External users must not be able to retrieve zone information from either DNS server. You need to plan a DNS security solution that meets the DNS security policy requirements. Your solution must not adversely affect required or allowed name resolution functions in the network. What should you do? A. On Alecnet 2, allow zone transfers to only servers listed in the Name Servers list. Disable recursion on Alecnet 1. B. On Alecnet 2, allow zone transfers to only servers listed by IP address. On Alecnet 1, do not allow zone transfers. C. On Alecnet 1, allow zone transfers to only servers listed in the Name Servers list. Disable recursion on Alecnet 2. D. On Alecnet 1, allow zone transfer to only servers listed by IP address. On Alecnet 2, do not allow zone transfers. Answer: A |
| 23. You are the network administrator for Alecnet .com. The network consists of a single Active Directory forest that contains three domains. Each domain contains domain controllers that run Windows 2000 Server and domain controllers that run Windows Server 2003. The DNS Server service is installed on all domain controllers. All client computers run Windows XP Professional. You need to add an additional DNS zone that is hosted on at least one DNS server on each domain. Youwant to configure the zone to allow secure updates only. What should you do? A. Configure the new zone on DNS servers in the root domain. Configure stub zones that refer to DNS servers in another two domains. B. Configure the new zone as a primary zone on one DNS server. Configure other DNS servers in the three domains as secondary servers for this zone. Enable the DNS Security Extensions (DNSSEC) protocol. C. Configure the new zone as an Active Directory-integrated zone on DNS servers in the three domains. Store the zone data in the DNS directory partition named DomainDNSZones. D. Configure the new zone as an Active Directory-integrated zone on DNS servers in the three domains. Store the zone data in the DNS directory partition named ForestDNSZones. Answer: D |