Refined of 70-291 latest exam materials and class for Microsoft certification for IT professionals, Real Success Guaranteed with Updated 70-291 pdf dumps vce Materials. 100% PASS MCDBA Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure exam Today!
2021 Apr 70-291 Study Guide Questions:
Q91. You have a server named Server1 that runs Windows Sever 2003 Service Pack 2 (SP2).
You create a FTP site on Server1.
You need identify how many users are connected to the FTP site.
What should you do?
A. From Task Manger, view the Networking tab.
B. From the command prompt, run Net view \server1.
C. From the properties of the FTP site, view Current Sessions.
D. From the properties of the FTP site, enable Open Database Connectivity (ODBC) logging.
Q92. You are the administrator of an Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional and are members of the domain. The domain contains a single DNS server named Server1. Root hints are enabled on Server1. Internet access for the company is provided by a Network Address Translation (NAT) server named Server2. Server2 is connected to the Internet by means of a permanent connection to the company's ISP. Users report that they can no longer connect to http://www.abc.com. Users can connect to internal resources and to other Internet Web sites. You can successfully access http:// www.abc.com from a computer outside of the corporate network. You need to ensure that the users can access http://www. abc.com. You must also ensure that users retain their ability to access internal resources. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Create a root zone on Server1.
B. Configure all affected users' computers to use the ISP's DNS server.
C. On all affected users' computers, run the ipconfig /flushdns command.
D. Disable Routing and Remote Access on Server2.
E. Use the DNS console on Server1 to clear the DNS cache.
Q93. CORRECT TEXT
You are a network administrator for Trey Research. The network contains a Windows Server 2003 computer named Server1 has two network connections named Internet Connection and Local Area Network Connection. Internet Connection is used to connect to the Internet and Local Area Network Connection is used to connect to the company network.
Server1 also runs Internet Information Services (IIS) 6.0 and hosts a public web site on port
80. You configure Server1 so that it can connect to the Internet and to the company network.
You need to ensure that company users can connect to the Internet through Server1. You also need to ensure that the web site is available to Internet users. You must accomplish these tasks with the least amount of administrative effort by using the Network Connections console. Your operation must not affect other settings on Server1.
Q94. You are the network administrator for City Power & Light. The network consists of a single Active Directory domain named cpandl.com. The domain contains Windows Server 2003 computers and Windows XP Professional computers.A server named Server1 functions as a DHCP server, and a server named Server2 functions as a DNS server. The relevant portion of the network is shown in the Network exhibit.
All users of client computers on the 10.9.7.0 subnet report that they can see each other's computers in My Network Places but cannot access the Internet or the 10.9.8.0 subnet. Users of client computers in the 10.9.7.0 network cannot access servers on either subnet. Users of client computers on the 10.9.8.0 subnet can access servers on both subnets and can access the Internet. All servers use static IP addresses. You need ensure that all client computers can access the Internet.What should you do?
A. On Server2, configure the DHCP Relay Agent.
B. On Server2, add a host (A) record for Server1 at address 10.9.8.91.
C. On Server1, activate the 10.9.7.0 scope.
D. On Server1, disable the 001 Microsoft Disable Netbios Option option.
E. On Server1, authorize DHCP.
You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains Windows Server 2003 computers and Windows XP Professional computers.
On a server named Serverl, you configure Routing and Remote Access to be a remote access server. All remote access client computers obtain an IP address from a DHCP server. You create remote access policies and verify that users can establish dial-up connections to Serverl.
Users report that they cannot access other computers on the network while dialed in to Serverl.
You need to ensure that remote access users can connect to all computers on the company network while dialed in to Serverl. In the Routing and Remote Access console, you select the properties page for Serverl.
What should you do next?
To answer, configure the appropriate option or options in the Serverl properties.
Update 70-291 pdf exam:
Q96. You are the network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. The network contains a Web server named Server1 that runs IIS 6.0 and hosts a secure Web site. The Web site is accessible from the intranet, as well as from the Internet. All users must authenticate when they connect to Server1. All users on the Internet must use a secure protocol to connect to the Web site. Users on the intranet do not need to use a secure protocol. You need verify that all users are using a secure protocol to connect to Server1 from the Internet. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Monitor the events in the security log on Server1.
B. Monitor the events in the application log on Server1.
C. Monitor network traffic to Server1 by using Network Monitor.
D. Monitor the Web server connections on Server1 by using a performance log.
E. Monitor the IIS logs on Server1.
Q97. Your network consists of a single Active Directory domain named contoso.com. DNS was installed during the installation of Active Directory. All servers run Windows Server 2003 Service Pack 2 (SP2).
On a member server in the domain, you run Nslookup and receive the following error message.
You need to ensure that the Nslookup query completes successfully on the member server.
What should you do?
A. Enable zone transfers for the contoso.com zone.
B. Configure a reverse lookup zone for the 10.10.0 subnet.
C. Enable secure and nonsecure updates to the contoso.com zone.
D. Add the member server to the access control list (ACL) for the contoso.com zone.
Q98. Your network consists of a single Active directory domain.
Your company plans to add new servers to the network. The new servers will run Windows Server 2003
Service Pack 2 (SP2).Members of a group named Group1 will install the new servers and join the servers to the domain.
You need to ensure that members of Group1 can join an unlimited number of servers to the domain.You must minimize the rights assigned to Group1.
What should you do?
A. Add Group1 to the Server Operators group.
B. Add Group1 to the Account Operators group.
C. In Active Directory Users and Computers, assign Group1 the permission to create computer objects.
D. In the Default Domain Policy, assign Group1 the right to add workstations to the domain.
Q99. You are the network administrator for your company. The network consists of a single Active Directory domain. The domain contains 35 Windows Server 2003 computers; 3,000 Windows XP Professional computers; and 2,200 Windows 2000 Professional computers.
The written company security policy states that all computers in the domain must be examined, with the following goals:
to find out whether all available security updates are present
to find out whether shared folders are present
to record the file system type on each hard disk
You need to provide this security assessment of every computer and verify that the requirements of the written security policy are met. What should you do?
A. Open the Default Domain Policy and enable the Audit object access policy, the Audit account management policy, and the Audit system events policy.
B. On a server, install and run mbsacli.exe with the appropriate configuration switches.
C. On a server, install and run HFNetChk.exe with the appropriate configuration switches.
D. Open the Default Domain Policy and enable the Configure Automatic Updates policy.
Q100. You are a network administrator for your company. The network consists of a single Active Directory domain. The domain contains three Windows Server 2003 domain controllers, 20 Windows Server 2003 member servers, and 750 Windows XP Professional computers. The domain is configured to use only Kerberos authentication for all server connections. A user reports that she receives an "Access denied" error message when she attempts to connect to one of the member servers. You want to test the functionality of Kerberos authentication on the user's client computer.Which command should you run from the command prompt on the user's computer?
Refined 70-291 testing engine:
Q101. You are the network administrator for your company. The company has offices in Seattle and Chicago. The network consists of a single Active Directory forest. All servers run Windows Server 2003. All client computers run Windows XP Professional with the latest service pack installed. There is a Windows Server Update Services (WSUS) Server named Server1 in the Seattle office. Server1 is configured to store updates locally.
You need to configure a WSUS server named Server2 in the Chicago office. The installation must meet the following requirements:
Client computers in Chicago must automatically receive the same updates as client computers in Seattle.
Client computers in Chicago must get updates from Server2.
What should you do?
A. Configure Server2 to synchronize content from Microsoft Update. Assign all client computers in Chicago to a new Group Policy object (GPO).
B. Configure Server2 to synchronize content from Microsoft Update. Assign the Chicago client computers to the same Group Policy object (GPO) as the Seattle client computers.
C. Configure Server2 to inherit all settings from Server1. Assign all client computers in Chicago to a new Group Policy object (GPO).
D. Configure Server2 to synchronize content from Server1. Assign all client computers in Chicago to a new Group Policy object (GPO).
Q102. You have a server that runs Windows Server 2003 Service Pack 2 (SP2).
You attempt to download a device driver. You receive an error message indicating that the Web site is blocked and scripting is disabled. You need to ensure that you can download the device driver while ensuring that access to scripts on other Web sites are restricted. What should you do?
A. Run Cscript.exe //h:cscript.
B. Disable Windows Internet Explorer Advanced Security.
C. Enable TCP/IP filtering and allow TCP port 80 and 443.
D. Add the device manufacturer's Web site to the Trusted sites zone.
Q103. You have a server that runs windows Server 2003 Service Pack 2 (SP2).
You create a user account named Admin1.
You need to allow Admin1 to restart the server and to manage shared folders, you must minimize the rights assigned to Admin1.
Which group should you add Admin1 to?
A. Power Users
D. Remote Desktop users
Q104. DRAG DROP
You are a network administrator for the Graphic Design Institute. The network contains five Windows Server 2003 computers that also function as DNS servers. The servers are configured as shown in the work areA. The Lagos and Nairobi branches of the school each have five Windows XP Professional client computers. The Tangier branch has 5,000 Windows XP Professional client computers, and the Cape Town branch has 2,500 Windows XP Professional client computers. Server1 is located in the school's main office in Cairo. Server1 is the authoritative server for a zone named graphicdesigninstitute.com. No changes are planned for the name server (NS) resource records for graphicdesigninstitute.com. The DNS servers in the Nairobi and Lagos branches are multiuse servers that are configured with the minimum hardware necessary to run Windows Server 2003. The DNS servers in the Cape Town and Tangier branches are configured as dedicated servers with hardware that is sufficient to sustain multiple DNS zones.
You need to ensure that the following requirements are met:
Each client computer can resolve names on the network as quickly as possible by using a fully qualified domain name (FQDN).
Prevent zone replication traffic from occurring on the slow network connections.
Minimize hard disk utilization on the DNS servers in the Lagos and Nairobi branches as much as possible.
Ensure that DNS queries in Tangier and Cape Town are resolved locally.
How should you configure the remote DNS servers? To answer, drag the appropriate server configuration to the correct server or servers in the work area.
Q105. You are the network administrator for A. Datum Corporation. The network consists of a single Active Directory domain named adatum.com. The domain contains a Microsoft Internet Security and Acceleration (ISA) Server computer named ISACorp and a DNS server named DNS1. Both servers are Windows Server 2003 computers. The company redesigns network addressing, and you change the static IP addresses for ISACorp to the addresses shown in the Network exhibit. (Click the Exhibit button.) DNS1 contains the new host (A) resource records for ISACorp. A Windows Server 2003 file server named Server1 is on the 10.10.11.0 subnet. Server1 has antivirus software installed that checks hourly for new virus definitions on a central antivirus server named WWW in the perimeter network. WWW is a Web server, and you can also access it through a Web page to perform manual virus definition updates. You find out about a new virus threat and want to immediately download the new update to Server1. You cannot access the WWW virus update Web site when you attempt to download a new virus update. The static TCP/IP configuration on Server1 uses DNS1 as the preferred DNS server. You confirm that ISACorp is configured properly. On Server1, you view the Internet Explorer LAN settings that are shown in the LAN Settings exhibit. (Click the Exhibit button.)You want to allow Server1 to connect to WWW. What should you do?
A. On Server1, in the LAN settings in Internet Explorer, select the Automatically detect settings check box.
B. On Server1, from a command prompt, run the ipconfig /flushdns command.
C. On ISACorp, from a command prompt, run the ipconfig /flushdns command.
D. On ISACorp, from a command prompt, run the ipconfig /registerdns command.