Question 1

Which of the following is the most likely cause for a computer to have an IP address of 169.254.110.14?
A)The address has been configured manually.
B)The subnet mask of the address is 255.255.0.0.
C)There is no DHCP server issue on the network
D)A static address is assigned to the computer.

Accepted Answer

The most likely cause for a computer to have an IP address of 169.254.110.14 is that there is no DHCP server issue on the network.
Key Takeaway: APIPA or Automatic Private IP Addressing is a DHCP failover mechanism on Microsoft Windows operating systems. With APIPA, DHCP clients can obtain IP addresses when DHCP servers are nonfunctional. When a DHCP server fails, APIPA allocates addresses in the private range 169.254.0.1 to 169.254.255.254. The clients update their addresses automatically when the DHCP server is again able to service requests.

Question 2

Which of these authentication protocols support encryption of connection data?
A)PAP
B)EAP-MD5-CHAP
C)MS-CHAP v2
D)SPAP

Accepted Answer

MS-CHAP v2 supports encryption of connection data.
Key Takeaway: MS-CHAP v2 provides two-way authentication, also known as mutual authentication. With mutual authentication, the remote access client receives verification that the remote access server that it is dialing in to has access to the user's password. The cryptographic key is always based on the user's password and an arbitrary challenge string. Each time the user connects with the same password, a different cryptographic key is used.

Question 3

What is the maximum number of characters that can be used for a user password if the authentication protocol used is MS-CHAP v1?
A)24 characters
B)14 characters
C)8 characters
D)10 characters

Accepted Answer

A maximum of 14 characters can be used for a user password if the authentication protocol used is MS-CHAP v1.
Key Takeaway: Microsoft Challenge Handshake Authentication Protocol version 1 or MS-CHAP v1 is an encrypted authentication mechanism. With MS-CHAP v1, the remote access server sends a challenge to the remote client that has a session ID and an arbitrary challenge string. The remote client returns the user name and a MD4 hash of the challenge string, the session ID, and the MD4-hashed password.

Question 4

David is experiencing a delay when he tries to connect to a remote Web site. Which of the following tools can he use to determine the specific router that is responsible for this delay?
A)Netdiag
B)Ipconfig
C)PathPing
D)Tracert

Accepted Answer

David can use the PathPing tool to determine the specific router that is responsible for this delay.
Key Takeaway: Pathping provides information about the path that data takes to reach the intended destination. It also displays information about network latency and network loss at intermediate hops between the source and the destination. It is a route tracing tool that combines the features of Ping and Tracert with additional information that neither of those tools provides. It sends packets to each router on the way to a final destination over a period of time, and then computes results based on the packets returned from each hop. These results can be used to pinpoint which routers or links might be causing network problems.

Question 5

A Windows Server 2003 computer is configured as a print server for a print device with a built-in network interface. Users of the print device report that they cannot print to it.
Chad, the network administrator, confirms that the IP address and drivers being used are correct and suspects that there is a problem with the MAC to IP address resolution on the print server. Which command should Chad run on the print server to find out which MAC address the print jobs are being sent to?
A)netcap.exe
B)netstat.exe
C)netsh.exe
D)net session

Accepted Answer

Chad should run the netcap.exe command on the print server to find out which MAC address the print jobs are being sent to.
Key Takeaway: Netstcap.exe is used to capture the network traffic. Using this command a filter can be created during the capture to determine the MAC address the print jobs are being sent to. It provides capture abilities only from a command prompt. Netcap is installed when you install the Support tools that are on the Windows XP CD-ROM. Once installed, Netcap installs the Network Monitor driver and binds it to all adapters when you first run the Netcap command.

Question 6

All computers on your network use the 10.10.0.0/16 address scheme. Tom, your manager, instructs you to place the 15 servers into a separate subnet that uses the 192.168.10 public addressing scheme. You must plan for a maximum of 25 servers in the future and need to configure a new subnet mask.
The subnet mask must allow a sufficient number of IP addresses for the existing servers and future growth. However, you want to conserve addresses as much as possible. Which subnet mask should you use?
A)255.255.255.248
B)255.255.255.240
C)255.255.255.224
D)255.255.255.252

Accepted Answer

You should use the 255.255.255.224 subnet mask to conserve as many addresses as possible. Key Takeaway: The 255.255.255.224 subnet mask gives five host address bits. The maximum number of host addresses available is 2⁵- 2 = 30 host addresses. This subnet mask will allow for sufficient IP addresses in case of further growth, while conserving as many current addresses as possible.

Question 7

A server is configured as a DHCP server with a single scope. You connect the network cable on Client 1 and attempt to connect to a network server, but the connection fails. You open a command prompt on Client 1 and attempt to renew Client 1's IP address.
An error message states "An error occurred while renewing interface Local Area Connection: unable to contact your DHCP server. Request has timed out". What should you do to ensure that Client 1 receives an IP address configuration from the DHCP server?
A)Configure Client 1 with a static IP address.
B)Restart Client 1.
C)Restart the DHCP service on the DHCP server.
D)Add additional IP addresses to the scope on the DHCP server.

Accepted Answer

You should restart the Client 1 computer to ensure it receives an IP address configuration fromm the DHCP server.
Key Takeaway: Client 1 computer's TCP/IP stack may have a problem and could be unable to send a DHCP discover broadcast packet. This usually happens when you insert a network cable after you start the PC. Ideally the network cable should be connected to the PC when you start the PC.

Question 8

Globe1 is a Windows Server 2003 computer and a critical file server configured with a DHCP client reservation. The DHCP server fails, and users report that they cannot access resources on Globe1. Which should you do to configure Globe1 so that it is available even if it is unable to obtain or renew a lease from the DHCP server?
A)Configure the DHCP scope in the 169.254.0.1 - 169.254.255.254 range.
B)On the Alternate Configuration tab of the Internet Protocol (TCP/IP) properties, configure IP setings.
C)Configure a static IP address.
D)On the DHCP server, configure the DHCP 001 Resource Location Servers reservation option for Globe1.

Accepted Answer

You should configure a static IP address to configure Globe1 so that it is available, even if it is unable to obtain or renew a lease from the DHCP server.
Key Takeaway: The Windows Server 2003 OS includes the Alternate Configuration feature. Servers using Windows Server 2003 OS can be configured to use an alternate static IP configuration if a DHCP server is unavailable. When a DHCP client determines that the DHCP server is unavailable, it will automatically change over and also configure the TCP/IP stack with the static address information specified on the Alternate Configuration tab of the Internet Protocol (TCP/IP) properties.

Question 9

The mnc.com network has a DNS server configured to resolve queries for external internet resources, and it also hosts the mnc.com internal zone for Active Directory. Employees report that they are directed to the wrong Web site when browsing the Internet. What should you do to minimize the occurrence of unexpected results when users browse the Internet in the future?
A)Enable the Secure cache against pollution setting in the advanced properties of the server.
B)Enable Fail on load if bad zone data setting in the advanced properties of the server.
C)Enable the Disable recursion setting in the advanced properties of the server.
D)Enable the Enable automatic scavenging of stale resource records setting in the advanced properties of the server and set it to 7 days.

Accepted Answer

To minimize the occurrence of unexpected results when users browse the Internet in the future, Chad should enable the Secure cache against pollution setting in the advanced properties of the server.
Key Takeaway: When the Secure cache against pollution setting is disabled, all records received in response to DNS queries are cached. This happens even when the records do not match to a queried domain name. Enabling the Secure cache against pollution setting disables the ability to pollute the DNS cache with incorrect information and to spoof DNS queries. With Windows Server 2003, the caches are secured against pollution by default. This will prevent users browsing the Internet from being directed to the wrong websites.

Question 10

John is the administrator of a network that contains a Windows Server 2003 computer named Globe 1 that has the DNS and WINS services installed. 400 Windows 2000 Professional computers connect to Globe 1 to access file and print resources.
Administrators report that network traffic has increased and that response times for requests for network resources on Globe 1 have increased. What should John do to confirm that Globe 1 is receiving requests for resources through NetBIOS broadcasts?
A)Run the tracert command on Globe 1.
B)Use Network Monitor to capture traffic between Globe 1 and Globe 2.
C)Monitor Event Viewer for Net Logon error or warning events.
D)Use Network Monitor to capture traffic between Globe 1 and all client computers.

Accepted Answer

John should use Network Monitor to capture traffice between Globe 1 and all client computers to confirm that Globe 1 is receiving requests for resources through NetBios broadcasts.
Key Takeaway: Network Monitor captures and displays network packets at the byte-level. Viewing and capturing filters can be configured to view or capture only the traffic that you are interested in. You can create a view filter by specifying source, destination IP address, or protocol. Capture filters can be triggered by a pattern match. In this case, if you capture traffic between Globe 1 and all client computers then you will be able to view the proper information to confirm that Globe 1 is receiving requests for resources through NetBIOS broadcasts.

Question 11

A Windows Server 2003 computer named Globe 1 has a third party application installed on it called S1. This server fails periodically. As a fix, you configure the recovery options for S1 to meet two requirements:
If S1 runs successfully for a day or more, the service is immediately restarted upon failure; and if S1 does not run successfully for another day after this failure, the entire server is immediately restarted. Which should you do?
A)Configure the Restart service after value for S1 to 1,440 minutes.
B)Configure the Reset fail count after value for S1 to 1 day.
C)Configure the response to the first failure to restart S1.
D)Configure the response to the first failure to restart Globe 1.

Accepted Answer

To fulfill these requirements, you should configure the Reset fail count after value for S1 to 1 day.
Key Takeaway: This option involves managing services through Control Panel. You can indicate the number of days after which the number of times a failure has occurred should be reset to 0 in the Reset fail Count dialog box. The Restart Service After dialog box is where you indicate the number of minutes to wait prior to trying to restart a service (Service1) subsequent to a failure. The Restart Computer Options dialog box is where you indicate the number of minutes to wait prior to restarting the computer.

Question 12

Some computers on a network are infected with a worm, which occasionally sends out traffic to various hosts on the Internet. You discover that this traffic always uses a certain source TCP port number. You need to identify which computers are infected.
Your solution should include detecting and identifying traffic that is sent by the worm and sending a notification to a network administrator that the infected computer needs to be repaired. Which of the following should you do?
A)Configure a WMI event trigger.
B)Configure a Network Monitor capture filter.
C)Configure a System Monitor Alert.
D)Configure a Network Monitor trigger.

Accepted Answer

To implement a solution with these requirements, you should configure a Network Monitor trigger.
Key Takeaway: Network Monitor is used to generate a trigger when various networking related values change. It captures frames for analysis and provides network utilization statistics and packet traffic. Once Netmon is installed, open Administrative Tools, and select Network Monitor to open the utility. Once Netmon is loaded, you can capture all frames sent to, or retained by, the network adapter of the machine on which it is installed. These captured frames can then be saved or viewed for further analysis.

Question 13

Your domain abc.com contains Windows Server 2003 computers and Windows XP computers. You configure a server named abc 1 to be a file server. You need to capture file-transfer network traffic that is being sent to and from abc 1. You install network Monitor tools from a Windows Server 2003 product CD-ROM on a server named abc 2, which is on the same network segment as abc 1.
You run Network Monitor on abc 2. However, Network Monitor captures only network traffic that is sent to and from abc 2. What should Chad do to capture all network traffic that is sent to and from abc 1?
A)Re-install Network Monitor application on abc 2 and run Network Monitor to capture network traffic.
B)Open Network Monitor on abc 2 and create a capture filter to enable the capture of all protocols running on abc 1.
C)Open Network Monitor on abc 2 and increase the capture buffer from 1 MB to 20 MB.
D)Install Network Monitor application from the Microsoft SMS Server on abc 1 and run Network Monitor to capture network traffic.

Accepted Answer

To capture all network traffic that is sent to and from abc 1, install Network Monitor application on abc 1 and run Network Monitor to capture network traffic.
Key Takeaway: The version that is shipped with Microsoft SMS Server allows you to monitor all traffic on the same network segment. In this case, Network Monitor was installed from the Windows Server 2003 product CD-ROM on the server named abc 2, hence it can be used to monitor traffic only on abc 2. To capture file-transfer network traffic being sent to and from abc 1, you should install Network Monitor application on abc 1 and run Network Monitor to capture network traffic.

Question 14

You are working as an administrator on xyz.com. A Server S5 is configured as a dial-up router and has two network adapters. One network adapter connects to the Ethernet LAN, and the other connects to a broadband networking device.
You need to verify that the current network bandwidth of the broadband connection is sufficient for the future expansion of the New York office.
Using System Monitor, which of the following should you do to measure the current utilization of the broadband network connection?
A)Monitor the Server\Packets/sec counter on the Server Object.
B)Monitor the Bytes Total/sec counter on the Server Object.
C)Monitor the Bytes Total/sec counter on the Network Interface Object.
D)Monitor the Current Bandwidth counter on the Network Interface Object.

Accepted Answer

To measure the current utilization of the broadband network connection, you should monitor the Bytes Total/sec counter on the Network Interface Object.
Key Takeaway: The Bytes Total/Sec measures the total number of bytes that are sent or received from the network interface. This includes traffic from all network protocols. This counter on the System Monitor is used to find out the current utilization of the broadband connection.

Question 15

Chad is the administrator of an Active Directory domain. Users report that they experience intermittent delays when they log on to the domain, Globe1. The replication attempts between Globe1 and other domain controllers are occasionally delayed. Chad needs to verify the cause of the intermittent connection delays to Globe1. What should Chad do first to track these delays over a period of one day?
A)Run the netdiag / verbose command to perform a network diagnostic test on Globe1.
B)Create a System Monitor counter to track the queue lengths on the network adapter on Globe1.
C)Use Network Monitor to view the network traffic packet contents between Globe1 and all other computers.
D)Run the replmon command to view the Active Directory replication status on Globe1.

Accepted Answer

To track these delays over a period of one day, Chad should create a System Monitor counter to track the queue lengths on the network adapter on Globe1.
Key Takeaway: System monitor displays performance data about the local computer, or on one or more remote computers in real time. It logs a history of performance results over time for local or remote computers. To monitor system performance, you must specify performance objects, counters, and instances of those objects so that the System Monitor knows which areas of system performance to track and display.

Question 16

Chad is the network administrator for Globe.com. The network contains a Windows Server 2003 Web server named WS1 connected to the Internet using a dedicated link. Chad runs a System Monitor log on WS1, which monitors the Bytes Total/sec counter on the Network Interface object.
The size of the System Monitor log is becoming too large for the available disk space, with sample rate set at 15 seconds and logs archived once a day. What should Chad do to reconfigure the System Monitor log settings to reduce the amount of data that is captured?
A)Retain the current counter, but set the sample rate to 60 seconds.
B)Retain the current counter, but set the sample rate to 5 seconds.
C)Change the counter to Total Bytes, and set the sample rate to 15 seconds.
D)Change the counter to Current Bandwidth, and set the sample rate to 60 seconds.

Accepted Answer

To reconfigure the System Monitor log settings to reduce the amount of data that is captured, Chad should retain the current counter, but set the sample rate to 60 seconds.
Key Takeaway: The Network Interface Bytes Total/Sec counter measures the total number of bytes that are sent and/or received from the network interface. This includes all network protocols. Less processor cycles are used when the sampling frequency is reduced. This is because a slower a counter is sampled.

Question 17

Chad configures a server named Globe2 as a Network Address Translation (NAT) server. Globe2 has a single network adapter and a modem. It connects to the Internet through a demand-dial connection.
Users report that when they attempt to connect to Internet Web sites, they intermittently receive the error message that states, "Page not found, but can connect after a few minutes." What should Chad do to configure Globe2 to allow users to always connect to Internet Web sites?
A)Configure the demand-dial interface as the private interface.
B)Set the dial-out hours on the demand-dial connection to any day and any time.
C)Set a demand-dial filter. Configure the filter for Only allow the following traffic. Specify a new filter outbound port 80.
D)Set the demand-dial connection to Persistent.

Accepted Answer

To configure Globe2 to allow users to always connect to Internet Web sites, Chad should set the demand-dial connection to Persistent.
Key Takeaway: Demand-dial connection is a connection, typically using a circuit-switched wide area network. It is terminated when there is no traffic. To allow users to always successfully connect to the Internet you need to configure the demand-dial connection to Persistent.

Question 18

Your network has a domain controller configured as a certification authority. The network has a Web server that runs IIS 6.0 and hosts a secure intranet site. The server also hosts other sites that do not require HTTPS. You configure a server certificate on the IIS server using a certificate from your internal CA.
Some users report that they cannot connect to the secure intranet site by using HTTPS. You confirm that all users can connect to the non-secure sites hosted on the Web server using HTTP. What should you do to view the failed HTTPS requests?
A)Review the security log in Event Viewer on the Web server.
B)Review the log fields created by IIS on the Web server.
C)Review the security log in Event Viewer on the CA.
D)Review the contents of the Failed Requests folder on the CA.

Accepted Answer

To view the failed HTTPS requests, you should Review the log fields created by IIS on the Web server.
Key Takeaway: Internet Information Services or IIS is software service that support Web site creation, configuration, and management, along with other Internet functions. It includes NNTP, FTP, and SMTP. He can review the log fields created by the IIS on the Web server. This will give necessary information to see the failed HTTPS requests.

Question 19

Which resource record is used to resolve domain names specified in e-mail addresses to the IP address of the mail server associated with the domain?
A)PTR
B)AX
C)CNAME
D)MX

Accepted Answer

MX record is used to resolve domain names specified in e-mail addresses to the IP address of the mail server associated with the domain.
Key Takeaway: MX record or a mail exchanger record (MX record) is a resource record in the DNS. This record specifies the mail server responsible for accepting email messages on behalf of a recipient's domain. It also specifies a preference value used to prioritize mail delivery if multiple mail servers are available. The MX records of a domain name specify how email should be routed with SMTP.

Question 20

David is switching on the computers on his network for the first time after a power outage. A DNS client submits a recursive query to a local DNS server to resolve an Internet name. The server for this Internet name is not authoritative. Which of the following occurs first in this case?
A)The DNS server contacts root servers configured in the cache.dns file.
B)The DNS client resolves the name from its cache.
C)The DNS server resolves the name from its cache.
D)The DNS server forwards the recursive query to an upstream DNS server.

Accepted Answer

The DNS server contacts the root servers configured in the cache.dns file.
Key Takeaway: The cache.dns lists the root servers on the Internet. This file contains DNS resource records that prime the local cache of the server with the addresses of authoritative root servers for the Internet. This file is used to preload resource records into the DNS server names cache. DNS servers use this file to help locate root servers on either a network or the Internet.

Quiz 1: Windows 70-291

Which of the following is the most likely cause for a computer to have an IP address of 169.254.110.14?

Which of these authentication protocols support encryption of connection data?

What is the maximum number of characters that can be used for a user password if the authentication protocol used is MS-CHAP v1?

David is experiencing a delay when he tries to connect to a remote Web site. Which of the following tools can he use to determine the specific router that is responsible for this delay?

Which resource record is used to resolve domain names specified in e-mail addresses to the IP address of the mail server associated with the domain?

David is switching on the computers on his network for the first time after a power outage. A DNS client submits a recursive query to a local DNS server to resolve an Internet name. The server for this Internet name is not authoritative. Which of the following occurs first in this case?