默认题库 - MCSE(70-291)

多选题

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003.The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site. The Web site is accessible from the intranet， as well as from the Internet. All users must authenticate when they connect to Server1. All users on the Internet must use a secure protocol to connect to the Web site. Users on the intranet do not need to use a secure protocol.You need verify that all users are using a secure protocol to connect to Server1 from the Internet. What are two possible ways to achieve this goal？（）

A. Monitor the events in the application log on Server1.
B. Monitor the events in the security log on Server1.
C. Monitor the Web server connections on Server1 by using a performance log.
D. Monitor network traffic to Server1 by using Network Monitor.
E. Monitor the IIS logs on Server1.

查看答案

单选题

You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. Client computers run Windows XP Professional， Windows 2000 Professional， or Windows NT Workstation. All client computers are configured with default settings.A server named Server1 functions as a DHCP and DNS server. All client computers are configured to use Server1 for name resolution. All DNS zones on Server1 are enabled for DNS dynamic updates. The company’s written security policy states that， when possible， the computer account for each client computer should be the owner of its own DNS host record.A server named Server18 contains antivirus server software. Server18 must be able to contact client computers by using fully qualified domain names （FQDNs） to propagate virus definition updates.You need to ensure that Server18 can resolve FQDNs for all client computers on the network. Which option should you modify on Server1？（）

A. the Dynamically update DNS A and PTR records only if requested by the DHCP clients check box
B. the Always dynamically update DNS A and PTR records check box
C. the Discard A and PTR records when lease is deleted check box
D. the Dynamically update DNS A and PTR records for DHCP clients that do not request dynamic updates （for example， clients running Windows NT 4.0） check box

查看答案

单选题

You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. A new low-priority update， Q318138， is released and is synchronized with the Windows Server Update Services （WSUS） server on the network. You decide to approve the update without testing. After the update is applied to client computers， users report that they can no longer run an accounting application.You need to remove the update from all client computers until you can test the update. What should you do？（）

A. Clear the Automatically approve new versions of previously approved updates option on the WSUS server. Resynchronize the server with the Windows Update server.
B. Clear the update for approval on the WSUS server. Resynchronize the server with the Windows Update servers.
Clear the update for approval on the WSUS server. Run the spuninst command from the Systemroot\$NtUninstallQ318138$\spuninst directory on each client computer.
D. Clear the Automatically approve new versions of previously approved updates option on the WSUS server. Delete the Systemroot\$NtUninstallQ318138$ directory on each client computer.

查看答案

单选题

You are the network administrator for your company. The network consists of a single IP subnet. All servers run Windows Server 2003. All client computers run Windows XP Professional.You need to install Windows Server Update Services （WSUS） on a computer named Server1. Server1 has limited hard disk space. Server1 stores a minimal amount of information locally. Client computers must install Microsoft critical updates.You need to ensure that client computers download updates directly from Microsoft Update. Only approved updates should be downloaded. What should you do？（）

A. Open the WSUS console. Specify the Update Source as Synchronize from Microsoft Update.
B. Open the WSUS console. Modify the synchronization option to not store updates locally.
C. Modify the default home page for all client computers to https： //windowsupdate.microsoft.com.
D. Configure the client Group Policy object （GPO） to use Microsoft Update as its update source.

查看答案

单选题

You are the network administrator for Fabrikam， Inc. The network contains a DNS server named Server1. Server1 is configured to resolve queries for external internet resources. Server1 also hosts the fabrikam.com internal zone for Active Directory. Users report that they are directed to the wrong Web site when browsing for well-known Internet Web sites. You need to minimize the occurrence of unexpected results when users browse the Internet in the future. You also need to minimize disruption to users. What should you do？（）

A. Enable the Disable recursion setting in the advanced properties of Server1.
B. Enable Fail on load if bad zone data setting in the advanced properties of Server1.
C. Enable the Secure cache against pollution setting in the advanced properties of Server1.
D. Enable the Enable automatic scavenging of stale resource records setting in the advanced properties of Server1 and set it to 7 days.

查看答案

单选题

You are the administrator of an Active Directory domain. The network contains a Windows Server 2003 domain controller named Server1Users report that they experience intermittent delays when they log on to Server1. Administrators report that replication attempts between Server1 and other domain controllers are occasionally delayed.You need to verify the cause of the intermittent connection delays to Server1. You also need to find out whether the problem is related to a hardware deficiency on Server1. You need to track these delays over a period of one day. What should you do first？（）

A. Run the netdiag /verbose command to perform a network diagnostic test on Server1.
B. Run the replmon command to view the Active Directory replication status on Server1.
C. Use Network Monitor to view the network traffic packet contents between Server1 and all other computers.
D. Create a System Monitor counter to track the queue lengths on the network adapter on Server1.

查看答案

单选题

You are the network administrator for the Paris branch office of Fourth Coffee.The Paris office has a Windows Server 2003 DNS server named Server10. Server10 hosts a DNS primary zone named fourthcoffee.com. All computers in the Paris office are configured to use Server10 as their preferred DNS server. The Berlin branch office of Fourth Coffee has a UNIX DNS server named Server11. Server11 hosts a primary zone named engineering.fourthcoffee.com. The refresh interval of the engineering.fourthcoffee.com zone is set to 24 hours. In the Berlin office， a firewall filters all incoming network traffic from other offices. A rule on this firewall prevents all computers from the Paris office network， except Server10， from performing DNS lookups against Server11.There is a business requirement that no delay should occur between the time that a new record is created in the engineering.fourthcoffee.com zone and the time that the record can be resolved from any computers in the Paris office. All computers in the Paris office must be able to resolve names in the engineering.fourthcoffee.com namespace.You need to configure DNS on Server10 to meet the requirements. What should you do？（）

A. Set up a stub zone named engineering.fourthcoffee.com.
B. Set up conditional forwarding to Server11 for the engineering.fourthcoffee.com namespace.
C. In the fourthcoffee.com zone， set up a delegation to the engineering.fourthcoffee.com zone on Server11.
D. Set up a secondary zone named engineering.fourthcoffee.com that has Server11 as master.

查看答案

单选题

our network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).You have a DHCP server that has 10 scopes.You need to add a DNS server to all 10 scopes by using the minimum amount of administrative effort. What should you do?（）

A. In the DHCP snap-in， add a server option.
B. In the DHCP snap-in， add a scope option for each scope.
C. At a command prompt on the server， run the Chcp command and code page 863.
D. At a command prompt on the server， run the Netsh command and configure the popd subcontext.

查看答案

单选题

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1. You need to allow Admin1 to restart the server and to manage shared folders. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？（）

A. Power Users
B. Administrators
C. HelpServicesGroup
D. Remote Desktop User

查看答案

单选题

Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has IPSec enabled. Several users report that they cannot connect to Server1. You need to see how many IPSec connection attempts failed due to authentication failures. What should you do?（）

A. From IP Security Monitor, view the Main Mode Statistics.
B. From Microsoft Baseline Security Analyzer, scan Server1.
C. From the Security event log, view the events from the IPSec source.
D. From System Monitor, add the IPSec V4 Driver : Active Security Associations counter.&e

查看答案

our network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).You have a DHCP server that has 10 scopes.You need to add a DNS server to all 10 scopes by using the minimum amount of administrative effort. What should you do?（）

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1. You need to allow Admin1 to restart the server and to manage shared folders. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？ （）

Your network contains a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has IPSec enabled. Several users report that they cannot connect to Server1. You need to see how many IPSec connection attempts failed due to authentication failures. What should you do?（）

You have a server that runs Windows Server 2003 Service Pack 2 （SP2）. You create a user account named Admin1. You need to allow Admin1 to restart the server and to manage shared folders. You must minimize the rights assigned to Admin1.Which group should you add Admin1 to？（）