Question 1

Chad is the administrator of a Windows Server 2008 computer named Globe1. Globe1 is an FTP server located in Globe's internal network. Administrators report an increased amount of FTP traffic to Globe1. Chad needs to configure Globe1 to achieve these goals: Identify the MAC address of a computer using FTP transfers from Globe1, find out the FTP commands executed, and ensure that operation of Globe1 isn't disrupted. What should Chad do?
A)Configure a performance alert to write an event to the application event log whenever the number of established FTP connections exceeds 1.
B)Use a Network Monitor filter to capture IP traffic from any computer to Globe1.
C)Run the arp command on Globe1 to identify the source of the FTP requests.
D)Run the finger command on Globe1 to identify the source of the FTP requests.

Accepted Answer

Chad should use a Network Monitor filter to capture IP traffic from any computer to Globe1.
Key Takeaway: Network Monitor provides a method for detecting and isolating network issues. It allows you to capture data, identify its source, and analyze the content of the message. Since Network Monitor captures data by frames, every packet includes the source and destination address, the header information, and the actual data. Hence Chad can achieve all three objectives.

Question 2

An employee is receiving an error message when she tries to open a Web page. The error states "Web page requested is not available." You note that https:// appears in the address bar. You confirm that the site is up and running by accessing it from a computer outside your corporate network. Which of the following should you do to fix this problem?
A)Allow traffic on TCP port 443.
B)Allow traffic on TCP port 53.
C)Configure the default IPSec Client (Respond Only) policy on the client computers.
D)The Web server hosting the Web page is down.

Accepted Answer

To fix this problem, you should allow traffic on TCP port 443.
Key Takeaway: The message "Web page requested is not available" indicates an encryption problem when https:// appears on the address bar. Web page encryption is implemented using the Secure Sockets Layer (SSL) protocol. This protocol uses TCP port 443. Hence you should allow traffic on TCP port 443.

Question 3

You are an administrator of an Active Directory domain named xyz.com. You configure a server named Server 2 as xyz.com's DHCP server. All client computers are configured as DHCP clients. Users report that they cannot connect to network resources. You investigate and discover that the client computers are not receiving their TCP/IP configurations from Server 2. What should you do to fix this issue?
A)Run the net stop dhcpserver command.
B)Authorize Server 2 using the DHCP console.
C)Run the net start dhcpserver command.
D)Restart the DHCP service using the DHCP console.

Accepted Answer

To fix this problem, you must authorize Server 2 using the DHCP console.
Key Takeaway: The authorization process for DHCP server computers depends on the installed role of the server on your network. To authorize a DHCP server in Active Directory, open DHCP and click DHCP in the console tree. On the Action menu, click Manage authorized servers. The Manage Authorized Servers dialog box appears. Click Authorize. When prompted, type the name or IP address of the DHCP server to be authorized and then click OK.

Question 4

All computers on your network use the 10.10.0.0/16 address scheme. Tom, your manager, instructs you to place the 15 servers into a separate subnet that uses the 192.168.10 public addressing scheme. You must plan for a maximum of 25 servers in the future and need to configure a new subnet mask.
The subnet mask must allow a sufficient number of IP addresses for the existing servers and future growth. However, you want to conserve addresses as much as possible. Which subnet mask should you use?
A)255.255.255.248
B)255.255.255.240
C)255.255.255.224
D)255.255.255.252

Accepted Answer

You should use the 255.255.255.224 subnet mask to conserve as many addresses as possible. Key Takeaway: The 255.255.255.224 subnet mask gives five host address bits. The maximum number of host addresses available is 2⁵- 2 = 30 host addresses. This subnet mask will allow for sufficient IP addresses in case of further growth, while conserving as many current addresses as possible.

Question 5

Your network includes a shared folder named IMPFol. You want to hide this folder from general view when a user is trying to access shared folders on this computer. Which of the following should you do?
A)Modify the share permissions to remove the All-Read permission on IMPFol from the Users group.
B)Change the share name to IMPFol $.
C)Change the share name to IMPFol #.
D)Modify the NTFS permissions to remove the Allow-Read permissions on IMPFol from the Users group.

Accepted Answer

To hide this folder from general view when a user is trying to access shared folders on this computer, you should Change the share name to IMPFol $.
Key Takeaway: A dollar sign ($) at the end of the share name hides the shared folder. Users can map a drive to this shared resource, but they cannot see the shared resource when they browse to it in Windows Explorer or in My Computer on the remote computer, or using the net view command on the remote computer.

Question 6

David is a network administrator in an organization. The organization's DHCP server has crashed and cannot be brought back online. The last backup is four days old. How can he preserve the current address space without restarting all user computers?
A)Deploy a new DHCP server with the same address scope and increase the new lease duration to 15 days.
B)Deploy a new DHCP server with the same address scope and raise conflict detection attempts to 3.
C)Restore the previous DHCP database from a backup.
D)Run the Ipconfig /renew command on all computers.

Accepted Answer

David should deploy a new DHCP server with the same address scope and raise conflict detection attempts to 3.
Key Takeaway: To enable address conflict detection you should Open DHCP, and click the applicable DHCP server in the console tree. On the Action menu, click Properties. Click the Advanced tab. For Conflict detection attempts, type a number greater than 0 (zero) and less than six. Then, click OK. The number specified here determines how many times the DHCP server tests an IP address before leasing it to a client.

Question 7

Globe1 is a Windows Server 2008 computer and a critical file server configured with a DHCP client reservation. The DHCP server fails, and users report that they cannot access resources on Globe1. Which should you do to configure Globe1 so that it is available even if it is unable to obtain or renew a lease from the DHCP server?
A)Configure the DHCP scope in the 169.254.0.1 - 169.254.255.254 range.
B)On the Alternate Configuration tab of the Internet Protocol (TCP/IP) properties, configure IP setings.
C)Configure a static IP address.
D)On the DHCP server, configure the DHCP 001 Resource Location Servers reservation option for Globe1.

Accepted Answer

You should configure a static IP address to configure Globe1 so that it is available, even if it is unable to obtain or renew a lease from the DHCP server.
Key Takeaway: The Windows Server 2008 OS includes the Alternate Configuration feature. Servers using Windows Server 2008 OS can be configured to use an alternate static IP configuration if a DHCP server is unavailable. When a DHCP client determines that the DHCP server is unavailable, it will automatically change over and also configure the TCP/IP stack with the static address information specified on the Alternate Configuration tab of the Internet Protocol (TCP/IP) properties.

Question 8

A server is configured to have a single 250-GB drive, which contains the operating system files. This drive also contains a shared folder where six network users store their graphic files. You want to prevent each network user from using more than 10GB of space in the shared folder. Which of the following should you do?
A)Create a quota entry for Everyone account. Set the quota limit to 10 GB.
B)Enable disk quotas on the volume and set the default disk quota limit to 10 GB. Select the Deny disk space to users exceeding quota limit check box.
C)Enable disk quotas on the volume and set the default disk quota limit to 10 GB. Select the Deny disk space to users exceeding 5 GB check box.
D)Upgrade the disk to a dynamic disk.

Accepted Answer

To prevent each network user from using more than10 GB of space in the shared folder, enable disk quotas on the volume and set the default disk quota limit to 10 GB. Select the Deny disk space to users exceeding quota limit check box.
Key Takeaway: To enable Disk Quota, right-click on the volume, select Properties, select the Quota tab, and Check the Enable quota management option. Set a default quota limit and select the deny disk space to users exceeding quota limit check box. Quotas cannot be specified to user groups.

Question 9

The Performance Logs And Alerts service is set up to send a message to C4 to notify an operator when the network use on C3 is too high. However, C4 does not receive the message sent from C3. Which of the following should you do to enable messages to be sent by C3 and received by C4?
A)Start the Alerter service on both C3 and C4.
B)Start the Alerter service on C3 and start the Messenger service on C4.
C)Start the Alerter service on C4 and start the Messenger service on C3.
D)Start the Messenger service on both C3 and C4.

Accepted Answer

To enable messages to be sent by C3 and received by C4, start the Alerter service on C3 and start the Messenger service on C4.
Key Takeaway: The Alerter service is a tool used to receive a network pop-up message and/or to run a program when one of the counters exceeds a preset threshold while using Performance Monitor. The Messenger service is a Windows service that transmits net send messages and messages that are sent through the Alerter service between client computers and servers.

Question 10

What is the maximum number of simultaneous VPN connections that Windows Server 2008 Standard Edition can handle?
A)250
B)500
C)1000
D)Unlimited

Accepted Answer

Windows Server 2008 can handle a maximum of 250 simultaneous VPN connections.
Key Takeaway: Windows Server 2008 supports two types of VPNs: PPTP and L2TP/IPSec. In case you do not specify a VPN remote access server role during the Routing And Remote Access Server Setup Wizard, Windows Server 238 includes only five ports for each VPN type. These ports appear in the Routing And Remote Access console when you select the Ports node.
To manually configure more ports for a VPN type, open the Ports Properties dialog box, select a port type, and click the Configure button. Enter an appropriate value into Maximum Ports field. You can configure a maximum of 250 ports for PPTP connections and another 250 ports for L2TP connections.

Question 11

You DHCP server works fine except that events 1014 and 1016 appear regularly on the System event log. Which of the following tools/utilities should you use to diagnose these events?
A)Netsh
B)Jetpack
C)Netdiag
D)Microsoft Network Monitor

Accepted Answer

You should use the Jetpack utility to diagnose these events.
Key Takeaway: These errors are related to the DHCP database. Event ID of 1014 means Out of database page buffers, and event ID 1016 means there are too many columns in an index. The Jetpack utility can indicate the source of the errors. To use the Jetpack utility on a DHCP database, start Cluster Administrator.
In Cluster Administrator, right-click DHCP service resource and click Take Offline. When the DHCP resource is offline, at a command prompt, change the working folder to the System32\Dhcp folder on the shared drive. At a command prompt, type: jetpack dhcp.mdb temp.mdb. After the Jetpack utility has run, right-click DHCP service resource in the Cluster Administrator, and then click Bring Online.

Question 12

A user reports that her computer cannot connect to a remote VPN server. You suspect that her client computer did not receive a recent hotfix. What should you do to verify which hotfixes are installed on her computer?
A)Run the update.exe command from a command prompt.
B)View the History-synch.xml file.
C)View the History-approve.xml file.
D)Run the wmic qfe command from a command prompt.

Accepted Answer

To verify which hotfixes are installed, you should run the wmic qfe command from a command prompt.
Key Takeaway: WMIC extends WMI for operation from several command-line interfaces and through batch scripts. It provides valuable information about hotfixes and security patches.

Question 13

You administer an Active Directory domain in which all servers are Microsoft Windows Server 2008, and all the clients are Microsoft Windows XP Professional. You have configured DHCP to update DNS only if the DHCP client requests. You find that the clients' A resource records are not updated in DNS when they obtain new DHCP leases. Which of the following is the most likely cause of this problem?
A)DNS is not integrated with the Active Directory.
B)DHCP server is not authorized in Active Directory.
C)The DHCP server's computer account is not a member of the DNSUpdateProxy global security group.
D)Clients are not configured to update their own host A resource records.

Accepted Answer

The DHCP server's computer account is not a member of the DNSUpdateProxy global security group.
Key Takeaway: In this case, the clients cannot perform this task because the DHCP server owns the A records. You should add the DHCP server to the DNSUpdateProxy group. Members of this group can update resource records but do not own them. In addition to adding the server to DNSUpdateProxy group, you should manually delete the clients' host records and then either reboot the clients or use the Ipconfig /registerdns command-line utility on each client.

Question 14

Your network has a print server running Windows 2008. A single printer is installed on this print server. Users in the Sales department are unable to print from this printer. You examine the print queue and find a list of documents waiting to be printed. Your attempt to delete the documents from the queue is unsuccessful. What should you do to enable the Sales department users to print their documents?
A)Install a new print device and reconfigure the printer to send print jobs to the new print device.
B)Install a second instance of the printer and configure the print queue to hold mismatched documents. Redirect the original printer to the new printer.
C)Install a second instance of the printer and delete the original printer. Instruct users to resubmit their print jobs.
D)Stop and restart the Print Spooler service on the print server and ask users to resubmit their print jobs.

Accepted Answer

To fix this problem, you should stop and restart the Print Spooler service on the print server and ask users to resubmit their print jobs.
Key Takeaway: The reason for this error to occur is that the print spooler might be stalled.
The print spooler is a software program responsible for managing all print jobs currently being sent to the computer printer or print server. The print spooler program may allow a user to delete a print job being processed or otherwise manage the print jobs currently waiting to be printed. In this case, to solve this problem on the print server, stop and restart the Print Spooler service.

Question 15

Chad decides to move the DHCP service from Server 1 to Server2. After installing DHCP on Server2, Chad creates a new scope in DHCP and activates it. Users report that they cannot log on to the network. Chad notices that the client computers are not receiving an IP address configuration from the DHCP server.
He opens Event Viewer on Server2 and views an event that states "The DHCP service failed to see a directory server for authorization." What should Chad do to fix this issue?
A)Authorize the DHCP service on Server2 in Active Directory.
B)Restart the DHCP service on Server2.
C)Uninstall the DHCP service on Server 1.
D)Install DNS on Server2. Configure a secondary zone on Server2 for the Active Directory domain DNS zone.

Accepted Answer

Chad should Authorize the DHCP service on Server2 in Active Directory.
Key Takeaway: To authorize a DHCP service, open the DHCP console from the Administrative Tools menu. In the Console Tree, right-click DHC, and then click Manage Authorized Servers. In the Manage Authorized Servers dialog box, select Authorize. In the Authorize DHCP Server dialog box, type the name or IP address of the DHCP server to be authorized and then click OK. The computer will list the IP and full computer name and then ask for confirmation. Click OK to continue.

Question 16

David installs Software Update Services on a network server named S1. When David attempts to synchronize S1 with the Windows Update servers, he receives an error message. David suspects that the proxy server requires authentication.
He opens Internet Explorer and verifies that he can communicate with an external Web site by using the proxy server. What should David do to ensure that S1 can communicate with the Windows Update servers?
A)Configure authentication to the proxy server in the SUS options.
B)Restart the IIS administration tool.
C)Configure the Internet Explorer settings to bypass the proxy server.
D)Install the Microsoft Firewall Client.

Accepted Answer

To ensure that S1 can communicate with the Windows Update servers, David should configure authentication to the proxy server in the SUS options.
Key Takeaway: SUS is a client-server application that enables a server on your intranet to act as a point of administration for updates. Once the updates for SUS clients are approved, the clients download and install the approved updates automatically without requiring local administrator account interaction. After configuring SUS you must configure proxy settings if the server running SUS connects to Windows Update using a proxy server. If your proxy server requires authentication, you can configure SUS to authenticate, and you must store all update content as well as metadata locally.

Question 17

Which of the following tools should you use to seize the role of any operations master?
A)netdom utility
B)ntdsutil utility
C)Active Directory Users and Computers tool
D)Active Directory Domains and Trusts tool

Accepted Answer

You should use the ntdsutil utility to seize the role of an operations master.
Key Takeaway: Ntdsutil.exe is a command-line tool that allows management facilities for Active Directory. One can use ntdsutil.exe to perform database maintenance of Active Directory, manage and control single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled.

Question 18

Some computers on a network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet. You discover that this traffic always uses a certain source TCP port number. You need to identify which computers are infected.
Your solution should include detecting and identifying traffic that is sent by the worm and sending a notification to a network administrator that the infected computer needs to be repaired. Which of the following should you do?
A)Configure a WMI event trigger.
B)Configure a Network Monitor capture filter.
C)Configure a System Monitor Alert.
D)Configure a Network Monitor trigger.

Accepted Answer

To implement a solution with these requirements, you should configure a Network Monitor trigger.
Key Takeaway: Network Monitor is used to generate a trigger when various networking related values change. It captures frames for analysis and provides network utilization statistics and packet traffic. Once Netmon is installed, open Administrative Tools, and select Network Monitor to open the utility. Once Netmon is loaded, you can capture all frames sent to, or retained by, the network adapter of the machine on which it is installed. These captured frames can then be saved or viewed for further analysis.

Question 19

You need to update five high-visibility servers with critical updates by using Windows Server Update Services (WSUS). After approving the updates, what should you do to ensure that the updates are applied within an hour?
A)Type the gpupdate /force command at the command prompt on the WSUS server.
B)Type the wuauclt /detectnow command at the command prompt on each of the five servers.
C)Type the gpupdate /force command at the command prompt on each of the five servers.
D)Type the wuauclt /detectnow command at the command prompt on the WSUS server.

Accepted Answer

To ensure that the updates are applied within an hour; you should type the wuauclt /detectnow command at the command prompt on each of the five servers.
Key takeaway: The wuauclt utility allows you control over some functions of the Windows Update Agent. It is most importantly used to initiate detection right away instead of waiting for detection to start. To start this process, click Start > Run and type cmd. At the command prompt, type wuauclt /detectnow. The wuauclt.exe file is located in the folder C:\Windows\System32.

Question 20

David is experiencing a delay when he tries to connect to a remote Web site. Which of the following tools can he use to determine the specific router that is responsible for this delay?
A)Netdiag
B)Ipconfig
C)PathPing
D)Tracert

Accepted Answer

David can use the PathPing tool to determine the specific router that is responsible for this delay.
Key Takeaway: Pathping provides information about the path that data takes to reach the intended destination. It also displays information about network latency and network loss at intermediate hops between the source and the destination. It is a route tracing tool that combines the features of Ping and Tracert with additional information that neither of those tools provides. It sends packets to each router on the way to a final destination over a period of time, and then computes results based on the packets returned from each hop. These results can be used to pinpoint which routers or links might be causing network problems.

Quiz 2: Microsoft Certified It Professional (MCITP)

Your network includes a shared folder named IMPFol. You want to hide this folder from general view when a user is trying to access shared folders on this computer. Which of the following should you do?

David is a network administrator in an organization. The organization's DHCP server has crashed and cannot be brought back online. The last backup is four days old. How can he preserve the current address space without restarting all user computers?

The Performance Logs And Alerts service is set up to send a message to C4 to notify an operator when the network use on C3 is too high. However, C4 does not receive the message sent from C3. Which of the following should you do to enable messages to be sent by C3 and received by C4?

What is the maximum number of simultaneous VPN connections that Windows Server 2008 Standard Edition can handle?

You DHCP server works fine except that events 1014 and 1016 appear regularly on the System event log. Which of the following tools/utilities should you use to diagnose these events?

A user reports that her computer cannot connect to a remote VPN server. You suspect that her client computer did not receive a recent hotfix. What should you do to verify which hotfixes are installed on her computer?

Which of the following tools should you use to seize the role of any operations master?

You need to update five high-visibility servers with critical updates by using Windows Server Update Services (WSUS) . After approving the updates, what should you do to ensure that the updates are applied within an hour?

David is experiencing a delay when he tries to connect to a remote Web site. Which of the following tools can he use to determine the specific router that is responsible for this delay?