默认题库 - MCSE(70-291)

单选题

You are the network administrator for your company.You work in the company’s branch office in Chicago. The network in your office consists of 40 Windows XP Professional desktop computers and one Windows Server 2003 computer named Server1. Server1 connects to the Internet through a 512-Kbps leased line. The main office of the company is in Seattle.Users of the desktop computers in the Chicago office are developers who are developing a new software product. You want these users to place daily builds of the product in a shared folder on Server1. You want developers in the Seattle office to be able to download the daily builds from Server1 by using FTP.You install IIS on Server1 and configure the FTP site so that it is available to the developers in the Seattle office. However， when you monitor inbound Internet connection attempts to Server1， you notice many attempted HTTP connections.You want to secure Server1 so that it is not susceptible to malicious Internet users. Server1 must also connect to the Internet to use Windows Update and to download virus definition updates. You do not want to purchase additional hardware or software. What should you do on Server1？（）

A. Enable Internet Connection Sharing （ICS）.
B. Configure port filtering on the network adapter to allow only TCP port 80 and TCP port 21.
C. Enable Internet Connection Firewall （ICF） and create a service setting in the Internet Connection Firewall settings that allows Internal and external TCP port 21 to Server1 internal and external TCP port 80 to Server1
D. Enable Internet Connection Firewall （ICF） and select the FTP Server check box in the Services tab. Enter Server1 as the server hosting the FTP services.

查看答案

单选题

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1.You need to allow Admin1 to restart services and to review the security log. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？（）

A. Power Users
B. Administrators
C. HelpServicesGroup
D. Remote Desktop User

查看答案

单选题

You are the network administrator for your company. A Windows Server 2003 computer named Router11 is used to connect the network to the Internet.You find out that some computers on the network are infected with a worm， which occasionally sends out traffic to various hosts on the Internet. This traffic always uses a certain source TCP port number.You need to identify which computers are infected with the worm. You need to configure a solution on Router11 that will perform the following two tasks：（1）Detect and identify traffic that is sent by the worm. （2）Immediately send a notification to a network administrator that the infected computer needs to be repaired. What should you do？（）

A. Configure a WMI event trigger.
B. Configure a Network Monitor capture filter.
Configure a Network Monitor trigger.
D. Configure a System Monitor alert.

查看答案

单选题

You are the network administrator for your company. The network contains a Windows Server 2003 Web server named WebServer1. WebServer1 is connected to the Internet by means of a dedicated link. You are responsible for monitoring the bandwidth utilization of WebServer1. You run a System Monitor log on WebServer1， which monitors the Bytes Total/sec counter on the Network Interface object. The sample rate for the counter is set to 15 seconds. The log is archived once each day.The size of the System Monitor log is becoming too large for the available disk space. You need to reconfigure the System Monitor log settings to reduce the amount of data that is captured. What should you do？（）

A. Retain the current counter， but set the sample rate to 5 seconds.
B. Retain the current counter， but set the sample rate to 60 seconds.
Change the counter to Total Bytes， and set the sample rate to 15 seconds.
D. Change the counter to Current Bandwidth， and set the sample rate to 60 seconds.

查看答案

单选题

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).You have two servers named Server1 and Server2. Server2 is on an isolated network segment. Both servers run Windows Server Update Services (WSUS) 3.0 and have the same WSUS configurations. You copy the WSUS updates from Server1 to Server2.You need to ensure that Server2 has the same WSUS approvals as Server1. What should you do?（）

A. On Server1, run wsusutil.exe and use the export parameter. On Server2, run wsusutil.exe and use the import parameter.
B. On Server1, run wsustil.exe and use the movecontent parameter. On Server2, run wsustil.exe and use the movecontent parameter.
C. On Server1, export the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Update Services\Server\Setup registry key. On Server2, import the registry key.
D. On Server1, create a backup of the %systemdrive%\WSUS\ folder. On Server2, restore the backup.&e

查看答案

单选题

You are a network administrator for your company.A Windows Server 2003 computer named Server1 is exhibiting connectivity problems. You monitor Server1 by using System Monitor and Network Monitor. While monitoring， you notice that Server1 has approximately 4 MB of available memory， and the average CPU utilization is running at 95 percent. When you investigate the Network Monitor capture， you notice that some network packets sent to Server1 during the capture have not been captured. You need to ensure that the impact of monitoring on Server1 is reduced and that all packets sent to the computer are captured. What should you do？（）

A. From a command prompt， run the diskperf command.
B. Run Network Monitor in dedicated capture mode.
Configure a Network Monitor capture filter.
D. Increase the buffer size in Network Monitor.

查看答案

单选题

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You attempt to download a device driver. You receive an error message indicating that the Web site is blocked and scripting is disabled. You need to ensure that you can download the device driver while ensuring that access to scripts on other Web sites are restricted. What should you do？（）

A. Run Cscript.exe //h：cscript.
B. Disable Windows Internet Explorer Advanced Security.
C. Enable TCP/IP filtering and allow TCP port 80 and 443.
D. Add the device manufacturer’s Web site to the Trusted sites zone.

查看答案

单选题

You are the network administrator for Fabrikam， Inc. The network consists of a single Active Directory domain named fabrikam.com. A Windows Server 2003 computer named Server1 functions as the DNS server for the domain.Wingtip Toys is a division of Fabrikam， Inc. The Wingtip Toys network consists of a single Active Directory domain named wingtiptoys.com. Server1 is a secondary zone server for wingtiptoys.com.You are monitoring notification traffic between the two domains. You need to keep a record of when the primary DNS server for wingtiptoys.com informs Server1 of available changes in the wingtiptoys.com zone. What should you do？（）

A. Use the Performance console to create a log of the DNS performance counter Notification Received on Server1.
B. Enable debug logging on Server1. Configure the log to record Notification events.
C. Run the replmon command to monitor replication events on Server1.
D. Run the dcdiag command to check DNS registration on Server1.

查看答案

单选题

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. The server has the Routing and Remote Access service enabled and is configured as a network address translation （NAT） router. You need to view a list of the current sessions on the Routing and Remote Access server and the private and public IP addresses and ports that are being used. What should you do？（）

A. Run Nbtstat–
B. Run Netstat–ano.
C. From the Routing and Remote Access snap-in， right-click NAT/Basic Firewall and select Export List.
D. From the Routing and Remote access snap-in， right-click the interface connected to the Internet and click Show Mappings.

查看答案

单选题

You are the network administrator for Margie¡’s Travel. The network consists of a single Active Directory forest that contains two domains named europe.margiestravel.com and namerica.margiestravel.com. The network contains Windows Server 2003 computers and Windows XP Professional computers. All client computers and 25 servers are dynamically assigned IP addresses by DHCP.All company computers are registered in either the europe.margiestravel.com DNS zone or the namerica.margiestravel.com DNS zone. All DNS servers contain copies of all zones. The written company network management policy states that computers cannot have duplicate host names. Client computers always connect to other computers by specifying only the name of the target computer. A fully qualified domain name （FQDN） is not required. You need to configure the client computers to ensure that all computer names can be resolved by using DNS without the domain name being specified. The configuration of client computers must be automated so that they do not need to be manually reconfigured if an additional domain is added to the forest. What should you do？（）

A. Configure the Append these DNS suffixes option in the DNS client configuration of each client computer.
B. Configure the 015 DNS Domain Name option on all DHCP scopes.
Configure the Default Domain Policy Group Policy object （GPO） in each domain. Enable the DNS Suffix Search List policy setting in the GP
D. Configure the Default Domain Policy Group Policy object （GPO） in each domain. Enable the Primary DNS Suffix policy setting in the GP

查看答案