は絶え間なく製品を開発し、改善して、製品の整えに取り組んでいます。以下は、ＩＴ認定試験トレーニングコースのリストです。
70-293BIG5 MCSE 2003 Security Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Exam24.jpはお客様が70-293BIG5質疑応答を使用すれば試験に合格することを100パーセント保証できます。もしお客様は、試験に失敗したら、どうしますか？お客様は、我々を知らせて、支払いの方式で試験資料の料金を全額返金いたします。よろしければ、われわれはお客さんの購読時間を延ばして、より多くの訓練時間があってもう一度試して見てきます。お客さんに決められるよ！
以下は問題集のＰＤＦ版の一部の内容です。
QUESTION 1You are the network administrator for Abc . The network consists of a single Active Directory domain named Abc .com. The network contains 10 domain controllers and 50 servers in application server roles. All servers run Windows Server 2003. The application servers are configured with custom security settings that are specific to their roles as application servers. Application servers are required to audit account logon events, object access events, and system events.Application servers are required to have passwords that meet complexity requirements, to enforce password history, and to enforce password aging. Application servers must also be protected against man-in-the-middle attacks during authentication. You need to deploy and refresh the custom securitysettings on a routine basis. You also need to be able to verify the custom securitysettings during audits. What should you do?
A. Create a custom security template and apply it by using Group Policy.
B. Create a custom IPSec policy and assign it by using Group Policy.
C. Create and apply a custom Administrative Template.
D. Create a custom application server image and deploy it by using RIS.
Answer: A
Explanation: The easiest way to deploy multiple security settings to a Windows 2003
computer is to create a security template with all the required settings and import the
settings into a group policy. We can also use secedit to analyze the current security
settings to verify that the required security settings are in place.
Incorrect Answers:
B: An IPSec policy will not configure the required auditing policy.
C: We need a security template, not an administrative template.
D: This will create multiple identical machines. We cannot use RIS images in this
scenario.
QUESTION 2
You are the network administrator for Abc . The company has a main office andtwo branch offices. The network in the main office contains 10 servers and 100client computers. Each branch office contains 5 servers and 50 client computers.Each branch office is connected to the main office by a direct T1 line. Thenetwork design requires that company IP addresses must be assigned from a single classful private IP address range. The network is assigned a class C private IP address range to allocate IP addresses for servers and client computers. Abc acquires a company named Acme. The acquisition will increase the number of servers to 20 and the number of client computers to 200 in the main office. Theacquisition is expected to increase the number of servers to 20 and the number of client computers to 200 in the branch offices. The acquisition will also add 10 more branch offices. After the acquisition, all branch offices will be the same size.Each branch office will be connected to the main office by a direct T1 line. The new company will follow the Abc network design requirements. You need to plan the IP addressing for the new company. You need to comply with the network design requirement. What should you do?
A. Assign the main office and each branch office a new class A private IP
address range.
B. Assign the main office and each branch office a new class B private IP
address range.
C. Assign the main office and each branch office a subnet from a new class B
private IP address range.
D. Assign the main office and each branch office a subnet from the current class
C private IP address range.
Answer: B
Explanation
After the expansion the situation will be:
• Main office
o Need 220 IP, 20 for servers and 200 for clients
• Branch Offices
o Need 220 IP, 20 for servers and 200 for clients
o We will have 12 branch offices
o 12 x 220 = 2640
Total for all offices is 2640 + 220 = 2860.
The network design requires that company IP addresses must be assigned from a single
classful private IP address range. We can subnet a private Class B address range into
enough subnets to accommodate each office. There are various ways of doing this, but
one way would be to subnet the class B address into subnets using a 24 bit subnet mask.
This would allow up to 254 IP addresses per subnet and up to 254 subnets.
Incorrect Answers:
A: The network design requires that company IP addresses must be assigned from a
single classful private IP address range.
B: The network design requires that company IP addresses must be assigned from a
single classful private IP address range.
D: The class C network doesn’t have enough IP addresses to accommodate all the
computers in all the offices.
QUESTION 3
You are a network administrator for Abc . The internal network has an ActiveDirectory-integrated zone for the Abc .org domain. Computers on the internal network use the Active Directory-integrated DNS service for all host nameresolution. The Abc Web site and DNS server are hosted at a local ISP. Thepublic Web site for Abc is accessed at www. Abc .com. The DNS server at the ISP hosts the Abc .com domain. To improve support for the Web site, Abc wants to move the Web site and DNS service from the ISP to the company’s perimeter network. The DNS server on the perimeter network must contain only the host (A) resource records for computers on the perimeter network. You install aWindows Server 2003 computer on the perimeter network to host the DNSservice for the Abc .com domain. You need to ensure that the computers on theinternal network can properly resolve host names for all internal resources, allperimeter resources, and all Internet resources. Which two actions should you take? (Each correct answer presents part of the solution. Choose two)
A. On the DNS server that is on the perimeter network, install a primary zone
for Abc .com.
B. On the DNS server that is on the perimeter network, install a stub zone for
Abc .com.
C. Configure the DNS server that is on the internal network to conditionally
forward lookup requests to the DNS server that is on the perimeter network.
D. Configure the computers on the internal network to use one of the internal
DNS servers as the preferred DNS server.
Configure the TCP/IP settings on the computers on the internal network to
use the DNS server on the perimeter network as an alternate DNS server.
E. On the DNS server that is on the perimeter network, configure a root zone.
Answer: A, C
Explanation:
By configuring a primary zone for Abc .com on a DNS server in the perimeter network,
we have a DNS server that can resolve requests for the www. Abc .com website. To
enable users on the LAN to quickly resolve Abc .com resources, we can configure
conditional forwarding on the internal Abc .org server so that requests for Abc .com
resources get forwarded straight to the perimeter network DNS server.
Incorrect Answers:
B: A stub zone is no good to us here. The perimeter DNS server must be authoritative for
the Abc .com domain. Therefore, we need a primary zone on the perimeter DNS server.
D: As long as the internal DNS servers are working, the external DNS server will never
be used. Internal clients will not be able to resolve www. Abc .com.
E: There is no need to configure a root zone on the perimeter network DNS server.
QUESTION 4
You are a network administrator for Abc . The network consists of a singleActive Directory domain named Abc .com. All domain controllers and memberservers run Windows Server 2003, Enterprise Edition. All client computers runWindows XP Professional. Abc has one main office and one branch office. Thetwo offices are connected to a T1 WAN connection. There is a hardware router ateach end of the connection. The main office contains 10,000 client computers, andthe branch office contains 5,000 client computers. You need to use DHCP to provide IP addresses to the Windows XP Professional computers in both offices. You need to minimize network configuration traffic on the WAN connection.Your solution needs to prevent any component involved in the DHCP architecture from becoming a single point of failure. What should you do?
A. At the main office, configure two Windows Server 2003 computers as a
DHCP server cluster.
Configure the branch office router as a DHCP relay agent.
B. At the main office, configure two Windows Server 2003 computers as a
DHCP server cluster.
At the branch office, configure a Windows Server 2003 computer as a DHCP
relay agent.
C. At the main office, configure two Windows Server 2003 computers as a
DHCP server cluster.
At the branch office, configure two Windows Server 2003 computers as a
DHCP server cluster.
D. At the main office, configure two Windows Server 2003 computers as DHCP
servers.
Configure one DHCP server to handle 80 percent of the IP address scope and the other DHCP server to handle 20 percent.
Configure the branch office router as a DHCP relay agent.
Answer: C
Explanation: The best fault tolerant solution here would be to implement a DHCP server
cluster in each office.
Cluster support for DHCP servers
The Windows Server 2003 DHCP Server service is a cluster-aware application
cluster-aware application An application that can run on a cluster node and that can be
managed as a cluster resource. Cluster-aware applications use the Cluster API to receive
status and notification information from the server cluster.
You can implement additional DHCP (or MADCAP) server reliability by deploying a
DHCP server cluster using the Cluster service
Cluster service
The essential software component that controls all aspects of server cluster operation and
manages the cluster database. Each node in a server cluster runs one instance of the
Cluster service provided with Windows Server 2003, Enterprise Edition.
By using clustering support for DHCP, you can implement a local method of DHCP
server failover, achieving greater fault tolerance. You can also enhance fault tolerance by
combining DHCP server clustering with a remote failover configuration, such as by using
a split scope configuration.
Other options for DHCP failover
Another way to implement DHCP remote failover is to deploy two DHCP servers in the
same network that share a split scope configuration based on the 80/20 rule
Incorrect Answers:
A: The branch office router would be a single point of failure in this solution.
B: The server hosting the DHCP relay agent would be a single point of failure in this
solution.
D: The branch office router would be a single point of failure in this solution.
お客様は、何か問題あるなら、何時でもご連絡してください。私達はお客さんの70-293BIG5認証に関連する問題の処理を助けます。私達は、お客さんを満足させてこそ、わが社が発展することが出来ますと信じています。