Question 1

Chad is the network administrator for Globe.com, which has an Active Directory-integrated DNS zone replicated to all domain controllers. DNS service is installed only on the domain controllers. The network management department requires all hosts in the payroll division to be registered in the DNS namespace, Payroll.Globe.com, which currently does not exist.
Chad needs to add support for the Payroll.Globe.com namespace to all the existing DNS servers. What should Chad do to find a solution that will not require reconfiguration if DNS servers are added to the domain in the future?
A)Create a delegation named payroll in the Globe.com zone.
B)Create a sub-domain named payroll in the Globe.com zone.
C)Create a stub zone for Payroll.Globe.com.
D)Create a primary zone for Payroll.Globe.com that is not Active Directory-integrated.

Accepted Answer

Chad should create a sub-domain named payroll in the Globe.com zone.
Key Takeaway: Sub-domains are used to assign a unique name to a particular department, function, or service related to the organization. A sub-domain entry is tied to the corresponding domain name lookup. A request for the sub-domain will be routed to a DNS server containing the DNS information for the parent domain.
Once the DNS record for the sub-domain is resolved to a particular IP address, the request is sent to the web server listening on that IP address. The web server can now delegate the request to the particular Web site based on the sub-domain name in the host header of the request object.

Question 2

David is the network administrator for a company with a Windows Server 2003 server and Windows XP clients. A new low-priority update is released and synchronized with the Windows Server Update Services server on the network. David approves the update without testing.
After the update is applied to client computers, engineering users report that they can no longer run a network-designer application. What should David do to remove the update from all client computers?
A)Clear the Automatically approved new versions of previously approved updates option on the WSUS server. Resynchronize the server with the Windows Update server.
B)Clear the update for approval on the WSUS server. Resynchronize the server with the Windows Update servers.
C)Clear the Automatically approved new versions of previously approved updates option on the WSUS server. Delete the Systemroot \$NtUninstallQ318138$ directory on each client computer.
D)Clear the update for approval on the WSUS server and run the spuninst command from the Systemroot\ $NtUninstallQ318138$\spuninst directory on each client computer.

Accepted Answer

To remove the updates from all client computers, clear the update for approval in the WSUS server. Then run the spuninst command from the Systemroot \$NtUninstallQ318138$\ spuninst directory on each client computer.
Key Takeaway: Spuninst uninstalls a Microsoft hotfix installed using Windows Update site or through Automatic Updates. When you install a hotfix, it automatically creates a hotfix uninstallation folder in your Windows directory. These hotfixes and updates are removed by running the spuninst command from the Systemroot\ $NtUninstallQ318138$\spuninst directory on each client computer where 318138 is the Knowledgebase article ID.

Question 3

Which of the following specifies the folder that stores all parsers for Network Monitor?
A)WINDOWS\System32\Netmon \Parsers
B)WINDOWS\System32\Parsers
C)WINDOWS\System32\Netmon
D)WINDOWS\System32\Netmon\ Parser

Accepted Answer

The WINDOWS\System32\Netmon\Parsers folder stores all parsers for Network Monitor.
Key Takeaway: In Network Monitor, Parsers are dll files that break down and read messages from various protocols. To add a new parser you should add a dll to the Windows\System32\Netmon\Parsers folder, and add entry for the new parser tp Parser.ini file in Windows\System32\Netmon.

Question 4

Which of the following is the session-layer interface used to connect a Client for Microsoft Networks to a TCP/IP protocol?
A)IP
B)NetBT
C)NetBIOS
D)Internet Explorer

Accepted Answer

NetBT is the session-layer interface used to connect a Client for Microsoft Networks to aTCP/IP protocol.
Key Takeaway: NetBT provides three services: NetBIOS name service, Datagram service, and Session service. NetBT applications can perform authorization based on the requester's NetBIOS name and/or TCP/IP address.

Question 5

During the name resolution process, which step does the resolver perform first to resolve a DNS name?
A)Read from the Hosts file.
B)Broadcast the local subnet.
C)Check the local cache.
D)Query the local DNS server.

Accepted Answer

During the name resolution process, the resolver checks the local cache first.
Key Takeaway: When the DNS Client service on the client computer begins the query process, the client contacts its preferred DNS server with a query. This name server checks its cache and zones for the answer. If it does not find the answer, it contacts a root server with the query. If the root server does not know the answer, it responds with a referral to a server authoritative for the .com domain.

Question 6

Which of these tabs on the DNS server Properties dialog box should you visit to test the basic DNS functionality?
A)Advanced
B)Monitoring
C)Security
D)Forwarders

Accepted Answer

You should visit the Monitoring tab on the DNS server Properties dialog box to test the basic DNS functionality.
Key Takeaway: The Monitoring tab allows you to test basic DNS functionality with two simple tests. The first test performs a simple query to the local DNS server. The server must be able to answer, forward, and reverse queries targeted toward it. The second test is a recursive query to the root DNS servers. For this to happen, the DNS server computer must be able to connect to the root servers specified on the Root Hints tab. These tests can also be conducted at regular intervals. The results of the tests are shown in the Test Results area of the tab.

Question 7

Server FS1 contains confidential data that is only available to users in the Payroll department. Chad wants all computers in the Payroll department to connect to FS1 using an IPSec policy. He assigns the Server (Request Security) IPSec policy to FS1.
Using Network Monitor, Chad notices that some computers in the Payroll department connect to FS1 without IPSec policy. What should Chad do to configure FS1 to ensure that all computers connect to it by using the IPSec policy?
A)Restart the IPSec Services service.
B)Assign the Secure Server (Require Security) IPSec policy.
C)Assign the Client (Respond Only) IPSec policy.
D)Unassign the Server (Request Security) IPSec policy.

Accepted Answer

To ensure that all computers connect to FS1 by using the IPSec policy, assign the Secure Server (Require Security) IPSec policy.
Key Takeaway: The three predefined IPSec policies you can choose from are Client (respond only), Server (request security), and Secure Server (require security). The Client policy is used if you do not want IPSec to be used unless the server with which you are communicating requests it. The Server policy causes the computer to try to negotiate an IPSec connection, but if the server on the other end doesn't support IPSec or is not configured to use it, your computer will still communicate via unsecured communications.
The Secure Server policy is used if you want the computer to send and accept IPSec secured communications only. If the computer on the other end can't use IPSec, your computer will reject all traffic from it. This is the most secure security setting associated with an IPSec policy.

Question 8

David installs Software Update Services on a network server named S1. When David attempts to synchronize S1 with the Windows Update servers, he receives an error message. David suspects that the proxy server requires authentication.
He opens Internet Explorer and verifies that he can communicate with an external Web site by using the proxy server. What should David do to ensure that S1 can communicate with the Windows Update servers?
A)Configure authentication to the proxy server in the SUS options.
B)Restart the IIS administration tool.
C)Configure the Internet Explorer settings to bypass the proxy server.
D)Install the Microsoft Firewall Client.

Accepted Answer

To ensure that S1 can communicate with the Windows Update servers, David should configure authentication to the proxy server in the SUS options.
Key Takeaway: SUS is a client-server application that enables a server on your intranet to act as a point of administration for updates. Once the updates for SUS clients are approved, the clients download and install the approved updates automatically without requiring local administrator account interaction. After configuring SUS you must configure proxy settings if the server running SUS connects to Windows Update using a proxy server. If your proxy server requires authentication, you can configure SUS to authenticate, and you must store all update content as well as metadata locally.

Question 9

Your domain contains a single DNS server named S1 with the Root hints enabled on S1. Internet access for the company is provided by a NAT server named S2. S2 is connected to the Internet by means of a permanent connection to the company's ISP.
Users report that they can no longer connect to xyz.com, but they can connect to internal resources and to other Internet Web sites. You can successfully access xyz.com from a computer outside the corporate network. What should you do to fix this problem?
A)On all affected users' computers, run the ipconfig/flushdns command.
B)Create a root zone on S1.
C)Disable Routing and Remote Access on S2.
D)Configure all affected users' computers to use the ISP's DNS server.

Accepted Answer

To ensure that all users are able to access xyz.com, you must run the ipconfig/flushdns command on all affected users' computers.
Key Takeaway: In this case, there may be some negative cache entries in the DNS cache. Hence using the ipconfig/flushdns will flush and reset the contents of the DNS client resolver cache. This can be used to discard negative cache entries from the cache, as well as any other entries that have been added dynamically.

Question 10

Your domain is configured to use only Kerberos authentication for all server connections. A user reports that he receives an "Access denied" error message when he attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user's client computer. Which command should you run from the command prompt on the user's computer?
A)Netsh
B)ksetup
C)ktpass
D)netdiag

Accepted Answer

You should run the netdaig command to test the functionality of Kerberos authentication on the user's client computer.
Key Takeaway: NetDiag helps isolate networking and connectivity problems by performing a series of tests to determine the state of the network client. It does not require parameters or switches to operate, so you can focus on analyzing the output. It diagnoses network problems by checking all aspects of a client computer's network configuration and connections. Along with troubleshooting TCP/IP issues, it also troubleshoots IPX and NetWare configurations.

Question 11

David installs Software Update Services on a computer named S3. He creates a Group Policy object that configures all client computers to receive software updates from S3. Later, David runs MBSA on all client computers to check if all updates are applied. David discovers that all the Windows 2000 Professional client computers received updates, but Windows XP Professional client computers did not.
David verifies that the GPO setting was applied on all Windows XP Professional computers. What should David do to ensure that the Windows XP Professional client computers receive their updates from S3?
A)Migrate all users of the Windows XP Professional client computers to the Administrators local group.
B)Restart Automatic Updates on all Windows XP Professional client computers.
C)Delete the NoAutoUpdate value under HKEY_LOCAL_MACHINE \SOFTWARE\Policies \Microsoft\ Windows \ WindowsUpdate\AU on all Windows XP Professional client computers.
D)Install Service Pack 1 (SP1) on all Windows XP Professional client computers.

Accepted Answer

To ensure that the Windows XP Professional client computers receive their updates from S3, David should Install Service Pack 1 (SP1) on all Windows XP Professional client computers.
Key Takeaway: Microsoft Baseline Security Analyzer or MBSA helps administrators determine the security state of their users' computers. It checks if the security state is in accordance with Microsoft security recommendations and offers specific remediation guidance. You can use MBSA to detect and fix common security misconfigurations and missing security updates on your computer systems. For a Windows Update to work, the minimum requirement on a XP computer is Service Pack 1. The Windows Update feature does not work on XP computers without Service Packs.

Question 12

Chad works on a network that has a Web server which runs IIS 6.0 and hosts a secure intranet site. This network consists of a single Active Directory domain with all servers running Windows Server 2003. All users on the network are required to connect to the intranet site by authentication along with HTTPS.
The company management decides to install a web application that must connect to the Web site by using HTTP. What should Chad do to collect information about the users who are connecting to the Web site by using HTTPS?
A)Check the application log on the Web server.
B)Use Network Monitor to capture network traffic on the Web server.
C)Configure a performance log to capture all Web service counters. Review the performance log data.
D)Review the log files created by IIS on the Web server.

Accepted Answer

Chad should review the log files created by IIS on the Web server to collect information about the users who are connecting to the Web site by using HTTPS.
Key Takeaway: IIS provides six different log file formats that you can use to track and analyze information about your IIS-based sites and services. The log file formats and logging options available in IIS are: W3C Extended Log File Format, W3C Centralized,
NCSA Common Log File Format, IIS Log File Format, ODBC Logging Fixed format, and Centralized Binary Logging format.

Question 13

In Chad's company, all portable computers used by the telecommuting employees must receive software updates from the Windows Update servers daily. Chad notices that updates from the Windows Update servers were not applied on a portable computer named C4. What should Chad do to ensure that software updates are applied to C4 daily at 10 a.m.?
A)Set the computer clock to 10 a.m. and click the Automatically download the updates and install them on the schedule that I specify check box.
B)Click the Automatically download the updates and install them on the schedule that I specify check box and type Configure it to work every day at 10 a.m.
C)Set the computer clock to 10 a.m. and click the Download the updates automatically and notify me when they are ready to be installed check box.
D)Set the computer clock to 10 a.m. and click the Notify me before downloading any updates and notify me again before installing them on my computer check box.

Accepted Answer

Chad should Click the Automatically download the updates and install them on the schedule that I specify check box and type Configure it to work every day at 10 a.m.
Key Takeaway: The Automatic update feature can be used in 3 ways: With 2 notifications, one for download and one for installing the downloaded update; with 1 notification, automatic download and notification before installing the downloaded update; and fully automatic, automatically download and install. The automatic feature can be configured to work daily, weekly, monthly, or at a specified time.

Question 14

Your network consists of a single Active Directory forest that contains two domains named europe.globe.com and america.globe.com. All company computers are registered in either the europe.globe.com DNS zone or the america.globe.com DNS zone. All DNS servers contain copies of all zones. The client computers always connect to other computers by specifying only the name of the target computer. A fully qualified domain name is not required.
You need to configure the client computers to ensure that all computer names can be resolved by using DNS without the domain name being specified. The configuration of the client computers must be automated so that they do not need to be manually reconfigured if an additional domain is added to the forest. What should you do?
A)Configure the Append these DNS suffixes option in the DNS client configuration of each client computer.
B)Configure the Default Domain Policy Group Policy Object in each domain and enable the DNS Suffix Search List policy setting in the GPO.
C)Configure the 015 DNS Domain Name option on all DHCP scopes.
D)Configure the Default Domain Policy Group Policy object in each domain. Enable the Primary DNS Suffix policy setting in the GPO.

Accepted Answer

You should configure the Default Domain Policy Group Policy object in each domain and enable the DNS Suffix Search List policy setting in the GPO.
Key Takeaway: The DNS Suffix Search List setting specifies the DNS suffixes to attach before the query for an unqualified single-label name is submitted. The values of the DNS suffixes in this setting may be set using comma-separated strings. One DNS suffix is attached for each submission of a query. If a query is unsuccessful, a new DNS suffix is added in place of the failed suffix, and this new query is submitted. The values are used in the order they appear in the string, starting with the left value and preceding to the right.

Question 15

David is a network administrator in an organization. The organization's DHCP server has crashed and cannot be brought back online. The last backup is four days old. How can he preserve the current address space without restarting all user computers?
A)Deploy a new DHCP server with the same address scope and increase the new lease duration to 15 days.
B)Deploy a new DHCP server with the same address scope and raise conflict detection attempts to 3.
C)Restore the previous DHCP database from a backup.
D)Run the Ipconfig /renew command on all computers.

Accepted Answer

David should deploy a new DHCP server with the same address scope and raise conflict detection attempts to 3.
Key Takeaway: To enable address conflict detection you should Open DHCP, and click the applicable DHCP server in the console tree. On the Action menu, click Properties. Click the Advanced tab. For Conflict detection attempts, type a number greater than 0 (zero) and less than six. Then, click OK. The number specified here determines how many times the DHCP server tests an IP address before leasing it to a client.

Question 16

Chad has not modified the default settings for DNS on the DHCP client or the server. On a client running Windows XP Professional, which of the following client records will be updated in DNS by the DHCP server?
A)A
B)MX
C)PTR
D)AX

Accepted Answer

The PTR resource record will be updated in DNS by the DHCP server.
Key Takeaway: PTR records are used to resolve IP addresses into hostnames. A PTR record, also referred to as a Reverse IP record, is an A record in reverse. An A record, DNS lists a FQDN such as abc.com and points it to an IP address. A PTR record lists an IP address and points it to a FQDN such as abc.com.

Question 17

How long do logged events last in the DHCP server logs by default?
A)One day
B)One month
C)15 days
D)One week

Accepted Answer

By default, logged events last for one week in the DHCP server logs.
Key Takeaway: To enable DHCP server logging, click Start > Settings > Control Panel. Double-click Administrative Tools, and then double-click DHCP. In the console tree, click the applicable DHCP server. On the Action menu, click Properties. On the General tab, select Enable DHCP audit logging and then click OK. DHCP server logs are comma-delimited text files with each log entry representing a single line of text.

Question 18

Which of these messages is not exchanged as part of a DHCP lease initialization?
A)Request
B)Renew
C)ACK
D)Discover

Accepted Answer

A renew message is not exchanged as part of a DHCP lease initialization.
Key Takeaway: DHCP servers and clients communicate through a series of DHCP messages. The different types of messages used to obtain a lease are DHCPDiscover, DHCPOffer, DHCPRequest, DHCPAck, DHCPNack, DHCPDecline, DHCPRelease, and
DHCPInform. A DHCP-enabled client obtains a lease for an IP address from a DHCP server.

Question 19

By default, after how much time does a DHCP client attempt to renew its IP address lease?
A)24 hours
B)1 week
C)4 days
D)8 days

Accepted Answer

By default, a DHCP client attempts to renew its IP address lease after 8 days.
Key Takeaway: Once the default lease period is crossed, a computer has to renew its use of the address they've been leased by your DHCP server. A grace period of four hours is added to the end of the lease to prevent against clock drift between the DHCP client and the server.
Certain circumstances when you might want to lengthen this lease period include: While maintaining a stable network where computer count and location is not changed; when you have a large pool of available IP addresses to lease from; and when your network is saturated with very little available bandwidth and you want to reduce DHCP traffic to increase available bandwidth.

Question 20

Which of the following best describes PID?
A)PID is a unique value for a running process in the system.
B)PID is a counter used for Network Monitoring.
C)PID is the packet identifier attached to every packet on the network.
D)PID is a DHCP pool identifier used to assign IP addresses to DHCP clients.

Accepted Answer

PID is a unique value for a running process in the system.
Key Takeaway: PID is a number used by some operating system kernels to uniquely identify a process. This can be viewed in the Processes tab in the Windows Task Manager. This number is used as a parameter in various function calls allowing processes to be manipulated. These processes may include adjusting the process's priority or killing the process.

Quiz 1: Windows 70-291

Which of the following specifies the folder that stores all parsers for Network Monitor?

Which of the following is the session-layer interface used to connect a Client for Microsoft Networks to a TCP/IP protocol?

During the name resolution process, which step does the resolver perform first to resolve a DNS name?

Which of these tabs on the DNS server Properties dialog box should you visit to test the basic DNS functionality?

David is a network administrator in an organization. The organization's DHCP server has crashed and cannot be brought back online. The last backup is four days old. How can he preserve the current address space without restarting all user computers?

Chad has not modified the default settings for DNS on the DHCP client or the server. On a client running Windows XP Professional, which of the following client records will be updated in DNS by the DHCP server?

How long do logged events last in the DHCP server logs by default?

Which of these messages is not exchanged as part of a DHCP lease initialization?

By default, after how much time does a DHCP client attempt to renew its IP address lease?

Which of the following best describes PID?