[Pinpoint] 70-291 Microsoft free exam 136-150 (Apr 2021)

Exam Code: 70-291 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: MCDBA Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
Certification Provider: Microsoft
Free Today! Guaranteed Training- Pass 70-291 Exam.

2021 Apr 70-291 Study Guide Questions:

Q136. You are the network administrator for your company. All client computers run Windows XP Professional. All servers run Windows Server 2003. The company has offices in Los Angeles, San Francisco, and Seattle. Each office is configured as a separate IP subnet. DNS is the only method of name resolution used on the network. You need to implement a software update infrastructure on the network. You install Windows Server Update Services (WSUS) on a computer named Server1 in the Los Angeles office. You install WSUS on Server1 with all default settings. You create a Group Policy object (GPO) named WSUS. You have no plans to install additional WSUS servers. You need to ensure that client computers can successfully connect to the WSUS server. What should you do? 

A. On the WSUS server, configure the IIS Manager to require HTTP over SSL. 

B. Configure the Internet browser home page on all client computers to point to http: //windowsupdate.microsoft.com. 

C. Enable communication over port 443 between all client computers and the WSUS server. 

D. In the WSUS GPO, specify the Server Name property to be the server's fully qualified domain name (FQDN). 

Answer: D 


Q137. CORRECT TEXT 

You are a network administrator for your company. The network consists of a single Active Directory domain. All servers run Windows Server 2003. All client computers run Windows XP Professional. 

You place client computers of the HR department in an organizational unit (OU) named HRClients. A Group Policy object (GPO) named HRClientsPolicy is linked to the HRClients OU. The HRClientsPolicy GPO has been configured to implement the Client (Response Only) IPSec policy. 

You place secure servers in an OU named SecureServers. A GPO named SecureServersPolicy is linked to the SecureServers OU. 

You have the following requirements: 

You need to configure the SecureServersPolicy GPO to meet the requirements by using the Group Policy Object Editor console. Your operation must not affect other settings. 

Answer: 


Q138. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). 

You have two servers named Server1 and Server2. Both servers have Windows Server Update Services (WSUS) 0 installed. 

You need to ensure that Server2 automatically receives the same update approvals as Server1. 

What should you do? 

A. On Server2, modify the Update Source and Proxy Server settings. 

B. On Server2, modify the Update Files and Languages settings. 

C. On Server2, run the Windows Server Update Services 3.0 setup wizard. 

D. On Server1, run the WSUS Server Configuration Wizard. 

Answer: A 


Q139. Your network contains 20 subnets.You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).Server1 has an IP address of 192.168.10.10 and is located on a subnet named Subnet10. All client computers run Windows XP Professional Service Pack 3 (SP3). 

Users on a subnet named Subnet1 report that they cannot connect to Server1. Users on Subnet10 report that they can connect to Server1. 

You log on to a computer on Subnet1. 

You need to identify the point of failure on the network. 

Which command should you run? 

A. Ipconfig /all 

B. Net view \192.168.10.10 

C. Ping 192.168.10.10 

D. Tracert 192.168.10.10 

Answer: D 


Q140. You are the network administrator for Trey Research. Trey Research uses a DNS namespace named treyresearch.com on the company intranet. Three hundred records have been manually created in the treyresearch.com zone for hosts that do not support dynamic updates. The treyresearch.com primary zone is currently located on a Windows Server 2003 computer named DNS01. No secondary zone is currently configured. The company purchases a new computer to function as the primary name server for the treyresearch.com zone. The new computer will be named DNS02. When DNS02 is configured, DNS01 must be reconfigured to host treyresearch.com as a secondary zone. You install Windows Server 2003 on DNS02 and add the DNS service. You need to configure DNS02 to host the primary zone for the treyresearch.com namespace. The records that are currently in the treyresearch.com zone must be retained. You want to ensure that all host names can be resolved immediately after DNS02 becomes the new primary name server for the zone. What should you do? 

A. 1.On DNS02, set up a primary zone named treyresearch.com. 

2.Enable dynamic updates on the zone. 

3.On DNS01, delete the treyresearch.com primary zone. 

4.On DNS01, set up a secondary zone named treyresearch.com. 

B. 1.On DNS02, set up a secondary zone named treyresearch.com. 

2.Add a name server (NS) record for DNS02 to the treyresearch.com primary zone. 

3.On DNS02, change the zone type of the treyresearch.com secondary zone to a primary zone. 

4.On DNS01, delete the treyresearch.com primary zone. 

5.On DNS01, set up a secondary zone named treyresearch.com. 

C. 1.On DNS02, set up a stub zone named treyresearch.com. 

2.Add a name server (NS) record for DNS02 to the treyresearch.com primary zone. 

3.On DNS02, change the zone type of the treyresearch.com stub zone to a primary zone. 

4.On DNS01, delete the treyresearch.com primary zone. 

5.On DNS01, set up a secondary zone named treyresearch.com. 

D. 1.On DNS02, set up a primary zone named treyresearch.com. 

2.Copy the file %systemroot%system32dnstreyresearch.com.dns from DNS01 to the same location on DNS02. 

3.On DNS01, delete the treyresearch.com primary zone. 

4.On DNS01, set up a secondary zone named treyresearch.com. 

Answer: B 


70-291 free question

Avant-garde 70-291 exam cram:

Q141. You have a Web server named Web1 that runs Windows Server 2003 Service Pack 2 (SP2). 

Users on the internal network connect to the Web site on Web1 by using the URL http://www.contoso.com. 

From the Internet, you cannot connect to the Web site by using the URL http://www.contoso.com.You can connect to the Web site by using the public IP address of Web1. 

You need to ensure that users on the Internet can connect to the Web site on Web1 by using the URL http://www.contoso.com. 

You deploy a DNS server that is accessible on the Internet. 

What should you do next? 

A. Create a stub zone for contoso.com. 

B. Create a primary zone for contoso.com. 

C. Create a secondary zone for contoso.com. 

D. Configure a conditional forwarder for contoso.com. 

Answer: B 


Q142. You have a DNS server named Server1 that runs Window 2003 Server Service Pack 2 (SP2). 

You need to ensure that the DNS server only creates event log entries when errors occur. 

What should you do? 

A. From Local Computer Policy, modify the audit policy settings. 

B. From Event Viewer, modify the properties of the DNS server log. 

C. From the DNS snap-in, modify the properties of Server1. 

D. From the DNS snap-in, modify the properties of the DNS event log. 

Answer: C 


Q143. CORRECT TEXT 

You are the network administrator for your company. The network consists of two subnets named Subnet1 and Subnet2. A server named Server1 that runs Windows Server 2003 functions as a router and connects the two subnets. 

Users of client computers on Subnet1 report that they can access computers in Subnet1 but cannot access computers in Subnet 2. Users of Subnet2 report that they can access computers in Subnet2 but cannot access computers in Subnet1. 

You need to configure Server1 to ensure that users can access computers in both subnets. You also need to ensure that the connection will resume automatically if Server1 restarts in the future. You must accomplish this task by using the Services console. Your operation must not affect other settings on Server1. 

Answer: 


Q144. You are an administrator of a single Active Directory forest that contains one domain. All servers run Windows Server 2003. A server named VPN1 is configured with Routing and Remote Access. VPN1 is configured to allow only inbound VPN connections that use L2TP. You assign the Server (Request Security) IPSec policy on VPN1. You configure the policy to use Kerberos and certificates for authentication. From a Windows XP Professional computer named Client1, which does not belong to the domain, you attempt to establish a VPN connection to VPN1 and receive the error message shown in the exhibit. (Click the Exhibit button.) You verify that the VPN ports on VPN1 are not being blocked by any intermediate devices. You need to configure Client1 to allow it to establish a VPN connection to VPN1. What should you do? 


A. Configure the VPN connection so that only L2TP IPSec VPN is enabled. 

B. Install a valid IPSec certificate in the local machine store. 

C. Assign the Client (Respond Only) IPSec policy. 

D. Assign the Server (Request Security) IPSec policy. 

Answer: B 


Q145. You are a network administrator for Alpine Ski House. The network consists of a single Active Directory domain named alpineskihouse.com.Your company acquires a company named Adventure Works. The Adventure Works network consists of a single Active Directory domain named adventure-works.com. A server named Server32 is a network-management application server in the adventure-works.com domain. Server32 accesses all of the desktop client computers to perform automated software upgrades and hardware inventory. The network-management software on Server32 references desktop computers by unqualified host names, which are resolved to clientname.adventure-works.com by using a DNS server. You join Server32 to your domain to become server32.alpineskihouse.com. The Server32 IP address is 10.10.10.90. You are gradually migrating all adventure-works.com desktop client computers to your domain to become clientname.alpineskihouse.com. You do not have access to the adventure-works.com DNS server. When Server32 attempts to apply an update to the client computers, the network-management software returns many alerts that say that desktop computers cannot be found. You want to allow the network-management software on Server32 to resolve unqualified client computer host names in adventure-works.com or alpineskihouse.com, and you want to use the minimum amount of administrative effort. What should you do? 

A. On Server32, in Advanced TCP/IP Settings, add adventure-works.com and alpineskihouse.com to the Append these DNS suffixes (in order) setting. 

B. On Server32, in System Properties, type adventure-works.com in the Primary DNS suffix of this computer field in the DNS Suffix and Netbios Computer Name setting. 

C. On the DNS server for alpineskihouse.com, add a zone for adventure-works.com. Create a host (A) record for server32.adventure-works.com that points to 10.10.10.90. 

D. On Server32, configure a Hosts file that contains the name and IP address of every network computer. 

Answer: A 


70-291 exams

Actual 70-291 :

Q146. Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). 

You have two DNS servers named Server1 and Server2. Server1 hosts the primary zone for contoso.com.Server2 hosts the secondary zone for contoso.com. 

You need to ensure that when records are updated on Server1, the records are replicated to Server2 in the shortest time possible. 

What should you do? 

A. On Server1, modify the zone transfer settings. 

B. On Server2, modify the zone transfer settings. 

C. On Server2, enable automatic scavenging of stale records. 

D. On Server1, modify the Time to Live (TTL) of the start of authority (SOA) record. 

Answer: A 


Q147. Your company has a main office and two branch offices. The main office is located in Montreal. The branch offices are located in Seattle and Winnipeg. 

In the Montreal office, you have a server named Server1 that runs Windows Server 2003 Web Edition Service Pack 2 (SP2).Server1 is configured as a VPN router. 

In the Seattle office, you have a VPN server named Server2. In the Winnipeg office, you have a VPN server named Server3. 

On Server1, you configure a L2TP/IPSec demand-dial interface for each branch office.On each branch office server, you create a single demand-dial interface that uses L2TP/IPSec to connect to the main office. All demand-dial interfaces are configured to use a pre-shared key. 

You discover that only one branch office can connect to the main office at a time. 

You need to ensure that both branch offices can connect to the main office simultaneously. 

What should you do? 

A. Add two more demand-dial interfaces on Server1. 

B. Install a computer certificate on Server1, Server2, and Server3. 

C. Upgrade Server1 to Windows Server 2003 Standard Edition SP2. 

D. Add an additional demand-dial interface on Server2 and Server3. 

Answer: C 


Q148. Your company has two offices. Each office is configured as a separate subnet. 

The network contains a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2).All client computers run Windows XP Professional Service Pack 3 (SP3). 

Users report that they are unable to resolve host names on the Internet. You verify that users can access all servers on both subnets. 

You need to ensure that users can resolve names on the Internet. The solution must ensure that users can access resources on the internal network. 

What should you configure? 

A. all client computers to use the IP address of a DNS server on the Internet as the primary DNS server 

B. all client computers to use the IP address of a DNS server on the Internet as the secondary DNS server 

C. the internal DNS servers to use a forwarder 

D. the internal DNS servers to use round robin 

Answer: C 


Q149. Your network consists of a single Active Directory domain named contoso.com.All servers run Windows Server 2003 Service Pack 2 (SP2). 

You plan to deploy a new DNS zone named adatum.com. 

You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. 

What should you do? 

A. Create a new Active Directory forest named adatum.com. 

B. Create a new Active Directory-integrated zone named adatum.com. 

C. Create a new standard primary zone named adatum.com.Disable round robin. 

D. Create a new standard primary zone named adatum.com.Disable netmask ordering. 

Answer: B 


Q150. Your network consists of a single Active Directory domain. 

You have a domain controller named Server1 that runs windows server 2003 Service Pack 2 (SP2). The DNS service is installed on Server1. Server1 contains only Active Directory-Integrated zones. Zone transfers are disabled for all zones. 

You need to back up the DNS zones on Server1. 

What should you do? 

A. From a command prompt, run Nslookup.exe. 

B. From windows Backup, back up the system state. 

C. From windows Backup, back up %SystemRoot%System32DNS. 

D. From the DNS snap-in, right-click Server1 and then click Export List. 

Answer: B