19 VALID SIMULATIONS FOR 70-291 EXAM

1: You are the network administrator for your company. The network contains a
Windows Server

2003 server named Server1. You configure Routing and Remote Access Service (RRAS)
on

Server1 to allow Virtual Private Network (VPN) connections. You verify that remote
clients using

Internetwork Packet Exchange (IPX) and Apple Talk protocol can connect to Server1.
Users report

that they are unable to connect to Server1 by using TCP/IP. You need to ensure that
remote clients

Using TCP/IP are able to establish a VPN connection to Server1.You must accomplish
the task by

Using the Server1 (local) Properties dialog box. Your operation must not affect other
settings on

Server1.

Correct Answers:
RRAS Server  Properties - IP TAB - Allow RRAS to select Adaptor from
drop down menu,

Also enable the check “Allow IP based Remote Access and demand – dial
Connection”

Apply  OK.

2: You are a network administrator for your company. The network consists of a single
Active

Directory domain. All servers run Windows Server 2003. All client computers run
Windows XP

Professional. You place client computers of the HR department in an organizational unit

(OU)

named HRClients. A Group Policy object (GPO) named HRClientsPolicy is linked

to the

HRClients OU. The HRClientsPolicy GPO has been configured to implement the
Client

(Response Only) IPSec policy. You place secure servers in an OU named SecureServers.
A GPO

named SecureServersPolicy is linked to the SecureServers OU. You have the

following
requirements: All communications between the secure servers must be
encrypted. All

communications between client computers of HR department and the secure servers

must be

encrypted. Client computers that are not in the HRClients OU must not be able to
communicate

with the secure servers.You need to configure the SecureServersPolicy GPO to

meet the

requirements by using the Group Policy Object Editor console. Your operation must not
affect

other settings.

Correct Answers:
IP Security Policies open by default. Just “Assign Secure Server (Required
Security) “

3: You are a network administrator for Trey Research. The network contains a Windows
Server

2003 computer named Server1. Server1 has two network connections named Internet
Connection

and Local Area Network Connection. Internet Connection is used to connect to the
Internet and

Local Area Network Connection is used to connect to the company network. Server1
also runs

Internet Information Services (IIS) 6.0 and hosts a public Web site on port 80. You
configure

Server1 so that it can connect to the Internet and to the company network. You need to
ensure that

company users can connect to the Internet through Server1. You also need to ensure
that the Web

site is available to Internet users. You must accomplish these tasks with the least
amount of

administrative effort by using the Network Connections console. Your operations must
not affect

other settings on Server1.

Correct Answers:-
? (May be just enabling the NAT, but not sure) please find the correct
solution yourself.
4: You are a network administrator for your company. All servers run Windows Server
2003. You

configure a server named Server1 to be a Virtual Private Network (VPN) server. The
server will

act as both a VPN server for clients and a router for the network. You need to ensure
the following:

Server1 is configured to allow VPN connections from remote clients. Server1 is

configured to

allow VPN connections to other VPN servers. You need to accomplish this task by using
the

Server1 (local) Properties dialog box. Your operation must not affect other settings on
Server1.

Correct Answers:
RRAS Server  Properties  General Tab  Enable Router (Lan & Demand
dialing Router) and

Remote Access Server  Apply  OK

5: You are a network administrator for City Power & Light. The network consists of a
single Active Directory domain named cpandl.com. The network contains Windows
Server 2003 computers, Windows NT Workstation 4.0 computers, and Windows XP
Professional computers. The cpandl.com DNS namespace is used on the company's
intranet. A Windows Server 2003 DNS server named Server1 uses the IP address
192.168.0.1. A Windows Server 2003 WINS server named Server6 uses the IP address
192.168.0.6. You need to ensure that the computers running Windows Server 2003 and
the computers running Windows XP Professional can connect to the computers running
Windows NT Workstation 4.0 when using computer names. You must accomplish this
task by using the cpandl.com Properties dialog box. Your operation must not affect
other settings on Server1.

Correct Answers: DNS Server  Properties  WINS TAB Add WIN Server
IP ADD but didn’t mark “Do not replicate”

Apply OK

6: You are the network administrator for Trey Research. The network consists of a
single Active Directory domain named treyresearch.com. You need to enable auditing
on all client computers to log the events which attempts to restarts, shuts down the
computer or the event affects the security log. You must accomplish the task by using
the Group Policy Object Editor console. Your operation must not affect other settings.

Correct Answers:
Audit System Even (Success & Failure) in computer configuration  Windows
Setting

 Security setting  Local Policies  Audit Policy

7: You are the network administrator for your company. You are configuring networking
on a Windows Server 2003 server in a new branch office. The network address consists
of three subnets. Each subnet contains a maximum of 10 computers. All computers on
the network use the 192.168.1.0/24 address scheme. The TCP/IP properties are
configured as shown in the following list: IP address: 192.168.1.10 Default gateway:
192.168.1.17 You need to configure a subnet mask on the server. The new subnet
mask must support the existing computers and allow for the network to be separated
into a maximum of six subnets in the future. You must accomplish this task by using
the Internet Protocol (TCP/IP) Properties dialog box.

Correct Answers:
255.255.255.224 is the subnet mask.

8: You are a network administrator for your company. The network consists of two IP
subnets named Subnet1 and Subnet2. All servers run Windows Server 2003. Subnet1
contains an intranet Web server named Server1. A newly-written security policy states
that only the client computers in Subnet1 can communicate with Server1. You discover
that users on Subnet2 can access resources on Server1. You need to ensure that any
hosts on Subnet2 cannot establish a network session to Server1. You must accomplish
this task by using the Internet Protocol (TCP/IP) Properties dialog box on Server1. Your
operation must not affect other settings on Server1.

Correct Answers:
Remove the Default Gateway on Subnet 1 TCP/IP Properties

9: You are a network administrator for your company. All servers run Windows Server
2003. All

Client computers run Windows XP Professional. A server named Server1 functions as a

DHCP

Server. All client computers receive their IP addresses from Server1. You need to
configure

Server1 to ensure that a client computer named Computer1 uses 172.16.1.209 as its
permanent IP

address. You verify that Computer1 has a media access control (MAC) address of

00-28-B4-D3-AA-01. You must accomplish this task by using the DHCP console. Your
operation must not affect any other settings on Server1.

Correct Answers:
DHCP Server  Reservation  Right Click  New Reservation  Enter
Computer Name,

IP Address & MAC (don’t use dash b/w MAC Add)

10: You are the administrator of a computer running Windows Server 2003 named
Server1. Server1 is a domain member server that has the DNS service installed.
Server1 is configured with two network interfaces named Interface1 and Interface 2.
Routing is not enabled between the two network interfaces. Interface1 is used to
connect to a guest network. Interface2 is used to connect to a secure network. You
need to ensure that the users in the guest network cannot resolve fully qualified
domain names (FQDNs). You must accomplish this task by using the Server1 Properties
dialog box. Your operation must not affect other settings on Server1.

Correct Answers:
Server DNS  Properties  Interface Tab  Remove the Guest Interface (Interface 1)

11: You are the network administrator for Trey Research. You have a new server named
Server1

that runs Windows Server 2003. Server1 has two network connections named Internet
Connection

and Local Area Network Connection. Internet Connection is used to connect to the
Internet and

Local Area Network Connection is used to connect to the company network. You verify
that

Server1 can connect to the Internet and to computers that are on the company
network. Users

report that their client computers are able to connect to Server1 but are unable to
connect to the

Internet. You verify that the client computers have 192.168.0.1 as their default
gateway. You

confirm that Routing and Remote Access Service (RRAS) is running. You need to ensure
that

company users can access the Internet through Server1. You must accomplish this task
by using

the Routing and Remote Access console. Your operation should not affect other settings
on

Server1.

Correct Answers:
Check in the Ronak SIMS (Enable & configure NAT for Internet)

12: You are a network administrator for Contoso, Ltd. A DHCP server named Server1
runs

Windows Server 2003. Server1 contains two scopes named Scope1 and Scope2. The
network
contains Windows XP Professional, Windows 2000 Professional and Windows NT 4.0
client

computers. All client computers receive their IP addresses from Server1. You need to
ensure that

users can access Windows NT 4.0 client computers by using their new names if the
Windows NT

4.0 client computers are renamed in the future. You must accomplish the task by using
the DHCP console. Your operation must not affect other settings on the Server1.

Correct Answers:
DHCP Consol  Server  Properties  DNS TAB  Chose the last below check box

(Dynamically update DNS &…… for examp windows NT 4.0)

13: You are a network administrator for Trey Research. All servers run Windows Server
2003. All

client computers run Windows XP Professional. A DHCP server named Server1 is

deployed in the

network. All client computers are configured as DHCP clients. Server1 shuts down
unexpectedly.

It takes six hours to repair the server. During that time, you add a new DHCP server
named

Server2 to the network. Users report that they cannot obtain IP address from Server2.
You need to

ensure all DHCP clients can receive IP address from Server2. You must accomplish the
task by

using the DHCP console. Your operation must not affect other settings on Server2.

Correct Answers:
Authorize the DHCP Server & Activate the Scope

14: You are a network administrator for your company. The network consists of a single
Active Directory domain named treyresearch.com. The domain contains an
organizational unit (OU) named Sales. All user accounts in the Sales department are
located in the Sales OU. Your company hires an administrator named David Jones.
David must be able to add user accounts to groups, and remove user accounts from
groups in the Sales OU. You need to ensure that David Jones has only the permissions
necessary for performing his required tasks. You must accomplish this task by using the
Delegation of Control Wizard dialog box.

Correct Answers:
Give the Create/Delete/Manage user account right by using the delegation
wizard.
15: You are a network administrator for your company. All servers run Windows Server
2003. All client computers run Windows XP Professional. All servers are configured with
static IP addresses and use 92.168.0.1 through 192.168.0.4 for network addresses. All
client computers are configured as DHCP clients and use 192.168.0.5 through
192.168.0.200. You have a server named Fileserver that functions as a file server. You
need to configure Fileserver to use a valid IP configuration. You also need to enable
Fileserver to communicate with all hosts on the network by using fully qualified domain
names (FQDNs). You must accomplish this task by using Fileserver’s Internet Protocol
(TCP/IP) Properties dialog box.

Correct Answers:
192.168.0.4

16: You are a network administrator for your company. The network consists of a single
Active Directory domain named treyresearch.com. All servers run Windows Server
2003. All client computers run Windows XP Professional. A DNS server is a member
server named Server1. Server1 hosts a standard primary DNS zone. You need to ensure
that no client-initiated host updates are added to the zone. You must accomplish this
task by using the DNS console. Your operation must not affect other settings on
Server1.

Correct Answers:
Right click the DNS Zone  Properties  Change dynamically update to “NONE”

17: You are a network administrator for Contoso, Ltd. The company has a main office
and a branch office. In the main office, you configure a server named Server1 to
function as a Routing and Remote Access server for remote connections. There is a
demand-dial connection named Remote1 between the main office and the branch
office. Users at the branch office report that the network connection to the main office
is often unavailable. You need to ensure that the connection is available at all times.
You also need to ensure that the connection will automatically attempt to connect if it
fails for any reason. You must accomplish this task by using the Remote1 Properties
dialog box. Your operation must not affect other settings on Server1.

Correct Answers:
Persistent connection (also available in sims)

18: You are the network administrator for your company. The network consists of a
single Active

Directory domain. All servers run Windows Server 2003. All client computers run
Windows XP

Professional. A server named Server1 has the Routing and Remote Access role
installed. Company

users dial in to Server1 when they are out of office. The company security policy
requires that

dial-in users must use smart cards. You need to implement mutual authentication for all
connection
attempts by using the Edit Dial-in Profile dialog box. Your operation must not affect
other settings

on Server1.

Correct Answers:
Configure Dial up for smart card authentication

19: You are a network administrator for your company. The London office is currently
connected

to the corporate WAN by using a Windows Server 2003 computer named Server1.
Server1 is

Configured as a dial-up router. Server1 has two network adapters named LAN Interface
and WAN

Interface. LAN Interface connects to the Ethernet LAN. WAN Interface is a broadband
networking

device. You need to view real-time data to find out the current utilization of the WAN
broadband

Connection by adding only one counter. You must accomplish this task by using the
System

Monitor snap-in.

Correct Answers:
Add the appropriate counter